last executing test programs:

2m53.524193541s ago: executing program 2 (id=6253):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
utimes(&(0x7f0000000100)='./file0\x00', 0x0)
writev(r0, &(0x7f0000000680)=[{}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858214ef5fa", 0x96}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653ea5d7bf9f0c681ab60972ee153d2dc8075849330ac6f6dbe898337e36b9615cb2ba2cb963a138737b3d17c36613d", 0xa2}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x7)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200))

2m50.242642856s ago: executing program 2 (id=6260):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x4)

2m49.869716998s ago: executing program 2 (id=6262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x149}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0xfeffffff, 0x0, 0x400c801}, 0x4008094)

2m49.75039546s ago: executing program 2 (id=6263):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e502d0000000000010902000000800000000904000005030002000921000033012205000905810300000c0007"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x5c, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x4, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xa3, {{0x7, 0x24, 0x6, 0x0, 0x0, 'X3'}, {0x5, 0x24, 0x0, 0xed}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1900, 0xc, 0x3}, [@acm={0x4, 0x24, 0x2, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x968608c0ee09cea5, 0x0, 0x80, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x5, 0x2}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x5, 0x1, 0x5, 0x20, 0x8}, 0x12a, &(0x7f0000000440)={0x5, 0xf, 0x12a, 0x2, [@generic={0x53, 0x10, 0x2, "bc529258ac744ea610f4a9f118a8e8ba0f1eb4dbd4485d260dc45f9d51597787e15a431358bb036985c4fc0e60916f4d53f920ed4815d8d86598e3d6e862034e19a1e51d823f93378c4be90ff879639c"}, @generic={0xd2, 0x10, 0x3, "e10ec5993c7eebbc47a55706e83b9bc93a19e09208553bafd38d533b3eadce202d6419b199f663259a2a43e8f492e7813d42673c203c710cc5a703f6396b2f1cba8da3e16476f30b3d15e2e185185f9538eb6b1c2b5ab68297ac0a6ca1df4f6443d8e64629539d8a3a963643ed017b727d79ea2c0f5e30beff7eda5cee039aca1e792b8f29771167b5904cf786508be7b6389429514b421b943798c51be101a273aa4699a6f488913b79172e4489c164920d47df9ecd0a0c006f66bee78495acb24da975c77654e714f2e3d4ca3c6b"}]}, 0x7, [{0x5c, &(0x7f0000000340)=@string={0x5c, 0x3, "a9542d71636920fa8339b0c9be77e201ed33b1472a594d8c4f26d355ee763a0ed15498f9b1147be1f9f44d7780f26851fb0a2f69239fea135b3b6a6959d7d629559248c8d68f80dc6954a1d7f45a9385243bdd36fe0c734da918"}}, {0x1b, &(0x7f00000003c0)=@string={0x1b, 0x3, "7f69b1cd463f3362d7d98ef9d226dd7d21b194823ebd89eb08"}}, {0x8e, &(0x7f0000000580)=@string={0x8e, 0x3, "1c2c95f62611e22a20507b7d6ae1dc6380d6d3b79ff1e78131b09309b3edc04130194a4763da4fe3fe03578fc50f4d57e28020b660df6ff66fa93661d8fb73636cd93d75c1c2d57800b0290670ad329bf9a2b685a7a15118d13ecb04a35576aff3b8226778f35bca630c3f54881f266dc29475a7c26623506e553b6935cb3297fed82b512c12047bc02bf4b5"}}, {0xca, &(0x7f0000000640)=@string={0xca, 0x3, "1db390b642a23d7de77dfc756f6190862c97ffaba5086774c7ca6916ac9bc426c92df09f10ea8c09c0ef2fa0044120720b113ab51a4d1dfe74327181482ec8f62830a1dc73a20beae73be0d2d965d302ba24f5718fd656eb558925817dc6a15ac65a83b8ca6e2c5db6a16a101a44bc35d6f6844ee658e7763d1030ba9307209d58ab80b26db63a30088b1747a5fabcf5892b0e67737e3abc6f5d612ae051d9f3ca0fad6dfd0492ccf3963f100251b49302bd92c3268673eca814667e93881745d14f3080ffd7b859"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x143b}}, {0xbc, &(0x7f0000000780)=@string={0xbc, 0x3, "e62e5cf51c0cc0f2b389910d510dbbc60599119ad1f2a665c2e5fdac5c59d63353445e26284f3cb9e1a35073477b809d22d6f87c4568f5ac4a793b0398c87f9fe819a7292d212091e61e2095b9518ccda8bae3a3c49738fda07f514af14585db5252eb963a816621ca0c31f1c8b19e14060e1f5692d284ce4ed70c2ce56b75909c98ddb604a858a6b9b92fa378a4b0f8d76b3cdb6998ae1cb27c82a83eaf95b8889b372586d101b4b709f8d18a994b9a23ecdff7c6ae3dc97a44"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x447}}]})
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x6, 0x29, {0x29, 0x21, "158f5ef9aa6ddf4f1304cac1a17e87c5b40f23bac54531e70b6750579f3c6b1a88bc75b546b95f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8ee2, 0x800, 0x1, 0xbfe00000}, &(0x7f0000000000), 0x0)
syz_clone(0x8a002080, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x0, 0x110, 0xffffffffffffffff, 0x0)

2m45.970675566s ago: executing program 2 (id=6281):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x2, &(0x7f0000000000)={0xf7a, 0x7})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0x37, 0x4)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0x0, 0x8ffff)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="26ad2b4abefd1963ce92064888da3382042cc8d0572d2184d371dbec097b84a8473bb707000000000000009e7d5ba71c50f74750cc87493ed307c1107b1d7e86e36539ab22ebe14eb879f61edcf6fb65eebd44683d24c5212269bfae1ce93400725efedad5ff7f2b29d2d3c82813e705001b11a8b2815e5f41", @ANYBLOB="c8b1228371d0d20c77b3039136c5cf3d8647a430798f0f4ad5a726dc304e33e0ae8049", @ANYRESDEC=r2], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="00000000fcbc5dba385b8be713a503b694cd5fe03b9ae5b437fcf4159c06f7f1977f8302b8cea5d944c929cc0a243c7f94a9a04b3a4e4016e7c894d303900a388ec75123b9e0835f25ebaff6e5f0e020831fc2de0d1b5fc28ab383fcdc5764fd3e2c03cbd3", @ANYRES32=0x0, @ANYBLOB="00000000000000008520000001000000181a0000", @ANYRES32=0x1, @ANYBLOB="00000000000000008500000066000000880a0600100000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x24, 0xa6, &(0x7f0000000400)=""/166, 0x41100, 0x6f, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r2, r1, r5, r5], &(0x7f00000005c0)=[{0x4, 0x4, 0xe, 0x1}], 0x10, 0x94}, 0x94)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
close_range(r7, 0xffffffffffffffff, 0x200000000000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sync()

2m44.968970801s ago: executing program 2 (id=6287):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1002, @broadcast}}, 0x1e)
getpeername$ax25(r0, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300))
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10167, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xd266, 0x0, 0x3, 0xffdfffff, 0x0, r4}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4)
io_uring_enter(r6, 0x47f4, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m43.923578139s ago: executing program 32 (id=6287):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1002, @broadcast}}, 0x1e)
getpeername$ax25(r0, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x1e, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300))
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10167, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xd266, 0x0, 0x3, 0xffdfffff, 0x0, r4}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4)
io_uring_enter(r6, 0x47f4, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

13.466583486s ago: executing program 4 (id=6878):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@none, 0xac, 0x2, "a49665", 0x3}, {@any, 0x9, 0x4, "891e62", 0x6, 0x10}]}}}, 0x20)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000b79000/0x2000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000)
socket$inet6(0xa, 0x80002, 0x0)

11.546004997s ago: executing program 4 (id=6889):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32=r11, @ANYRES32=r6], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})

10.474099738s ago: executing program 4 (id=6893):
timerfd_create(0x0, 0x80000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000200)='GPL\x00'}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x5e, 0xfa00, {r1, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @loopback, 0xbff}, @ib={0x1b, 0x0, 0xbf, {"8535b62c8126bba5623b4b416408a797"}, 0x9, 0x1, 0xff}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0)
bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
pselect6(0x0, 0x0, 0x0, &(0x7f00000045c0)={0x3, 0x79c, 0x708, 0x4, 0x81, 0x5, 0xa83, 0x7}, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

8.315123393s ago: executing program 4 (id=6900):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/sockstat6\x00')
read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0xede)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
r4 = gettid()
r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x1)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000780)={'raw\x00', 0x4, "72fb3d26"}, &(0x7f0000000080)=0x2c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40041, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$HIDIOCGVERSION(r10, 0x80044801, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000100180c200000300000000000081004d0086dd6900040000002f"], 0x3e)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.439370671s ago: executing program 4 (id=6905):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902"], 0x0)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0)

5.110677692s ago: executing program 0 (id=6909):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001400)={{<r1=>r0, &(0x7f0000000000)='$\x00', 0x509000, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x5]}, {0x401, 0x9, 0x3, 0x3}}, 0x450d, &(0x7f00000000c0), &(0x7f0000000100)=0x9}, 0x3, &(0x7f0000001380)=[{0x3, 0x1, &(0x7f0000001500)='\x00L\x82\f\x1am2\x9d\x8c\x8b\x1fX/\xc5\x89i\x15\xf6\xce?:\xdd\x81+\x86he\xd0A%\xc2\xe4l-\xf4\x9c\xb9\xbc.\x98F\xaakm\xe7\x13Bqc:\x93e\xb1}\xab>N\xdbF\x86\xe6\x0e\x96q\x01U\as\x81\xaf\xd2\xd4\xe2\xb4\xcdZ\x97{\xe7\xd6\xe8\'l5\x01', &(0x7f0000000180)="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", 0x1000, 0x10}, {0x1, 0x2, &(0x7f0000001180)='$+}&]+[*!(\x00', &(0x7f00000011c0)="1bcce772bb925c9fb00e38f73a7a4d631c5d22aa59fed5a71df90a3d07c48e0566126b031500ba4349c763826dcf0fa04b8b0fe700ebe1302448b233f7bd584a2e5392ac5fbf54562490156b532925734f68e7752984ec33a0b816fced30f0ba28b2449033a061415f98c3f5bda22c65712adc760dfbc5d96b2676a420183ed57f5bce74ca14ae7428ba6b814c6623fd550eefe251939990eb7df8506bfa2db89e2a1d3bce441ff5b872c49709844a508c96bf8e0b4f318eab6217fec9eec9279f45750d53b6a68a3a4fbdc6f8bb0bd91dc1ab1c1d1382a1c5fc93a19a4b2c6fce4d2e", 0xe3, 0x12}, {0x3, 0x9b, &(0x7f00000012c0)='\x00', &(0x7f0000001300)="b468c30d59f3765fb59d3d235feeedbce8b17173a8dbed8e2f786a4b4158d849f8a583f2ce47437e349212d189e00365ccf7236c215b1677cb06100561f60b907399d0ec2435d4453a6633ff9eadaf23138a3226ab739f3b26f75f1111f55fc13bfa216d2fe5cb3ac6abd935344b4b26b38f", 0x72, 0x10}]})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x7fff, &(0x7f0000001480), 0x106, 0x5}}, 0x20)
readahead(r0, 0x4, 0xfffffffffffff801)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0)

4.994635454s ago: executing program 5 (id=6911):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
utimes(&(0x7f0000000100)='./file0\x00', 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858214ef5fa", 0x96}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653ea5d7bf9f0c681ab60972ee153d2dc8075849330ac6f6dbe898337e36b9615cb2ba2cb963a138737b3d17c36613d51e93e3ce7fab2b169fe6bb938ca04e0af4cecf6018bea", 0xb9}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x8)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200))

4.417841335s ago: executing program 0 (id=6912):
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x48042, 0x101)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000940)={{}, {}, 0x10000000, 0x1, 0xfd})
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)
socket$inet6_tcp(0xa, 0x1, 0x0)

3.94288392s ago: executing program 5 (id=6914):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402"], 0x258)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fc000000000000000000000000000010fe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000e9c61caca340be"], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x222400, 0x0)

3.373398647s ago: executing program 0 (id=6916):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0xdb365000)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0)

3.158820606s ago: executing program 0 (id=6917):
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x101000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.625872274s ago: executing program 3 (id=6918):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10) (async)
listen(r0, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, 0x1, 0xa, 0x401, 0x0, 0x0, {0x41c9849678607705, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa8, 0x6, "34bd173e431ee1113cba711c3cc295370e66e468d4d54cfe198ce4978024b151740ed27e9f15521a6e42acaffa6502cfc4748466f7e0f9bde41c79cbc3dd7609451e464a4befa8d53c321f806fa614f9fce20c32fe47050978408b7a6c7e3492b850fcf63ed37969108e7ba540a9d9f949971d8d2c29c3bfd0a0e7ba8329de13045afca8247717680f3091d74b818a7820c8ee67c435841d9275cf26af53c6ded6feea00"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) (async)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200))

1.860144863s ago: executing program 5 (id=6919):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

1.803837781s ago: executing program 1 (id=6920):
syz_open_dev$sndpcmp(&(0x7f0000003b40), 0xa8c, 0x2080)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0)
r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300)

1.802495849s ago: executing program 0 (id=6921):
syz_emit_ethernet(0x76, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x48, {0x0, 0x6, "fd3a85", 0xff, 0x89, 0x0, @remote, @local, [], "85e7d2e1a48a75fc"}}}}}}}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setuid(0xee01)
unlink(&(0x7f0000000000)='./file0\x00')
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040)
sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="e42f9c6f74", 0x5}], 0x1}, 0x4008001)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1, 0x800, 0x2)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0)

1.742319972s ago: executing program 3 (id=6922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfe, 0x0, 0x235d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}}, 0x0)

1.741917237s ago: executing program 1 (id=6923):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x400, 0x0, 0x1, 0xfffc, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x16}]}]}}]}, 0x3c}, 0x1, 0x0, 0x7000000}, 0x0)

1.627832864s ago: executing program 5 (id=6924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000004010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

1.553571211s ago: executing program 3 (id=6925):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x67ce, 0x4)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
r2 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000000)
fcntl$getown(r2, 0x9)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x2, 0xb, 0x3, 0x2, 0x2, 0x3, 0x2, 0x378, 0x40, 0x334, 0x7fffffff, 0x26, 0x38, 0x1, 0x7ff, 0x2, 0xff00}, [{0x70000000, 0x0, 0x0, 0x8, 0x8d, 0x2, 0x8}]}, 0x78)
fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffffffffffffff})
fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008})
io_setup(0x2, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0x3, 0x4)

1.413150465s ago: executing program 5 (id=6926):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x2, &(0x7f0000000000)={0xf7a, 0x7})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0x37, 0x4)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x0, 0x0, 0x8ffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="26ad2b4abefd1963ce92064888da3382042cc8d0572d2184d371dbec097b84a8473bb707000000000000009e7d5ba71c50f74750cc87493ed307c1107b1d7e86e36539ab22ebe14eb879f61edcf6fb65eebd44683d24c5212269bfae1ce93400725efedad5ff7f2b29d2d3c82813e705001b11a8b2815e5f41", @ANYBLOB="c8b1228371d0d20c77b3039136c5cf3d8647a430798f0f4ad5a726dc304e33e0ae8049", @ANYRESDEC=r2], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="00000000fcbc5dba385b8be713a503b694cd5fe03b9ae5b437fcf4159c06f7f1977f8302b8cea5d944c929cc0a243c7f94a9a04b3a4e4016e7c894d303900a388ec75123b9e0835f25ebaff6e5f0e020831fc2de0d1b5fc28ab383fcdc5764fd3e2c03cbd3", @ANYRES32=0x0, @ANYBLOB="00000000000000008520000001000000181a0000", @ANYRES32=0x1, @ANYBLOB="00000000000000008500000066000000880a0600100000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x24, 0xa6, &(0x7f0000000400)=""/166, 0x41100, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r2, r1, r4, r4], &(0x7f00000005c0)=[{0x4, 0x4, 0xe, 0x1}], 0x10, 0x94}, 0x94)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sync()

1.111449196s ago: executing program 4 (id=6927):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x18}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002100012724bd7002fddbdf2500000000"], 0x14}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000f2a000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
getpid()
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000940)=ANY=[@ANYBLOB="1201100100000010631d01014000010203010902a20003010070000904000000010100000a24010800000201020d2406000003080000000000000c24020601010608000010000c24020800000300000000000924060506010100020924030001010005000c2402060301030206003305090401000001020000090401010101020000090501091000400000072501000080000904020000010200000904020107250180028100"], 0x0)

969.22774ms ago: executing program 1 (id=6928):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty=0x7000000, @multicast1}}}], 0x20}}], 0x1, 0x4880)

953.044708ms ago: executing program 3 (id=6929):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61fb070100542f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d270100810000013f0c78f364e8000086dd810088a808"], 0x0)

842.418297ms ago: executing program 0 (id=6930):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402"], 0x258)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fc000000000000000000000000000010fe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000e9c61caca340be"], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x222400, 0x0)

712.367477ms ago: executing program 3 (id=6931):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000000000000000000000000000000000000000000006a6923f186cc9ce1d35301b9f48dc9ad5f618c086edd7c30e502c59d702f025aa54639055ae40dab327e9b8bcf6cc3f62d879c7a2681064f972872bdb348c0a1866116fe96ec8271498717d9ef6fd25f27b3dfd34d0902b54025ac9a9f05bd89475d29bf2d95d892622a4b67c640d9129ece5189091658c171ce49974b68"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000380)=0x1, 0x4)
r2 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x2)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000040), 0x4001)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r7=>0x0})
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'})

654.863831ms ago: executing program 1 (id=6932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001008000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000020000000300000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310004000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
add_key(&(0x7f0000000300)='trusted\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)

266.487462ms ago: executing program 1 (id=6933):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000))
unshare(0x24020400)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

129.886183ms ago: executing program 3 (id=6934):
r0 = syz_io_uring_setup(0xb14, &(0x7f00000000c0)={0x0, 0x99a3, 0x8001, 0x3, 0x2e1}, &(0x7f0000000000), &(0x7f0000000180))
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={<r1=>r0, &(0x7f0000000300)='\x00', 0x200800, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x4]}, {0x363a}}, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xd})
ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000440)={0x0, {0x0, 0x0, @qam}})
io_uring_setup(0x68b1, &(0x7f0000000240)={0x0, 0x17a2, 0x10})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08001b"], 0x44}}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x40400)
ioctl$BLKSECDISCARD(r5, 0x127d, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
r6 = syz_open_dev$evdev(0x0, 0x5, 0x1ef082)
ioctl$EVIOCGKEYCODE(r6, 0x80084504, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(r9, 0x0, 0x94)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x800)
r10 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

51.148521ms ago: executing program 1 (id=6935):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

0s ago: executing program 5 (id=6936):
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x2, 0xd)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000030801040000000100005200000000090c00048008000340fffff9650500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
sendmmsg$alg(r0, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="b8ca15bed653d3637c6d5856e5baf5e668d295a07a2396e2911fc044aff0c5a4649bb4baed6375c4c5ad88a800fefdf407493830732ba08ac04c6b3f1531f32eecc9c406797ae4636c1715f1bc8ca566875925e473ad24e77e7127789ac28309457326b14d60f7383ddaa8dc8c9ed223ca2abbe672210d9c15f1c848a9256b6caac17b7f0cbf9112c7d91af03fa164f6c3ac881ec4d11cef68a64ef6dee1d7d674cb7bb35764eaf85d344d2183b46bfd37d431c9df0b7ccc15f7094769c76a65a44d57767fffae71af73eef28a5a7fe3ae3f4984bb211f2d1289332342e72de66983", 0xe2}, {&(0x7f00000000c0)="7be7751baf948a6b82558592740d72efcc1e851c81c04400a8b5f4b48f9a5faf5d9a4dbc7ca4624d79b3b68b654562c403950ba5a4fb1283a23dccb11324cb7a7db430d964", 0x45}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="3095dc00b87e15dcf835bed7f22a45c4c370134c3da9bb504b2d377fe1fbd2269f58e1474e21805711f25d83334babf12cfd212fe8923284594d324439a1e9af56d24a688e1795cdc3a611cd54c3655db31a2d9bc9ec0fb1d7eb39957670f25b4f94fb3dc7c01e56a5d65ef1b0e7b71e085e31dcac37071ebcd470e345ad9b8373051c10ed23e955a985af1675fa32ad4972d7e870f481739431d5a461b696a6f0fc256f68649ace65ccafd59bc7185fce982a23a6f6ad20a88a90a42d6faad5484f16e54a48565baaaff9432f2d27412bb923d328689b655ddd1e80240ed5911be2", 0xe2}, {&(0x7f00000004c0)="311be7b97e2203a7fdf6ba6ff1530613f076b57195f9539eaf4979b0509c62f28fc2741ef84bc9b091d057c99919f023fef9fc5213e453615dad9b4a55e521be2d76d9d668aff7c3e2a4871a53e87ba6fe7e1aa5ce6e02e581c55fa8b7626691ac96c88ffff22d56bc43267c07e66f3309944afd9d0b955d535b0e0b89ee221d60cb02719ed63b5d5e41b5a42b4296ea5290328531b470e52731fc752189edbb5c2dd8e4a8b62b11ff1d05fc45f3b9812405ff47b695c48a0d09e93f3081d694ac07a800a1fe4597bf122358f49371611e7eb0e0ea3d815bc6a08bc7e63de7b1e04e1579", 0xe4}, {&(0x7f00000005c0)="b40c7c28983258c6217c0a5c9998ac59b4596d54a5ed78caf4a4c38f6058634878f7db078bce64a4aca5fad2a4c6d140f69b5fe42317173df3a286386dfcd2295d0f02d5e30c7c20e7314a09c813319a0f1ae616ae200e2a279d627ae684167074877b59794c703730291adf04cfc8422613edf18ec9f059f2aeff65a00a7994f1", 0x81}], 0x6, &(0x7f0000000700)=[@iv={0x40, 0x117, 0x2, 0x26, "3507e69d7c8a258b4116809f74bc58089fed49e68c7fbc74fec0a2171f7f1fd52bccd8b11730"}, @assoc={0x18}, @iv={0x28, 0x117, 0x2, 0xd, "867291b76aa9a224e2b4e8bc91"}, @op={0x18, 0x117, 0x3, 0x1}], 0x98, 0x400c042}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000007c0)="87f06bbd046ccc4bc3a45dde94393675b5891a62b754325b31807423863edbee6912e5a8e9f9c2e91fb8fe0be9e959242e5090ef2db54245ea0bd1b4e249af2154e706b7c77cd6e9bf761857c035fcc5ff0f9dcc04b13dcd0847735f9f549b6c080ffb2d7c4d3abe34a0c22ec3fea1009907e54a24f9f1c7693d8df4b9c15760c8365b11cfd2f43692c203bf5805043a7e4918973c2c7f54684c10d35d26d3703f1dce5ce2e1cf0349686471fa9a5e17443b58feb6582319c5c95bbc75d5ef3cd3e7d7680dd5492b9de74538a0640fd65b6d3d62756540945942b18780dfa0e29bdcb79f34f501199036", 0xea}, {&(0x7f00000008c0)="93e49a6a81f1c1155bfce31e17b76f86174443ac11212b7bbfb6e18b6561ee66b1eee03de3fe7646f28ee9ac8fa6cf7d6a7594d3f63ebf8efaea1cadc2b2f9553baec1169a0e5aca73e67e454c91e2b3a0146a234c558c35206ec469ef0a196a780d392f5ed045e849536b95c71f18f9", 0x70}, {&(0x7f0000000940)="851132f5c097229feb87f7534addd5f633a89ac313b934eb9e83b53ba4a180550c15307e7d7cc01244749a268d651b0bba368b00fe489ce8db56516318bb4e7d325a51a465a0d02cfa621eb4992f67ca0c9e01f173fa1fc3a5d0a1d16dcdc3bb2746113c0a33780b4b0fd323d0a670fe56b9fd86891bff70c900612cbdb7d4845ed7c6b7aee59c71bd7322b5574922c7f688ce45", 0x94}, {&(0x7f0000000a00)="f4c78f9b2659ea28d67ab8e8ad823b9103cabb93429511595bc34c85dd83835ea32a72f2e0aadbb0ae8355027e951c1e5bc15da6d7779c23adc458d74c45018ca2865764d6dc09246b532ff707f1", 0x4e}, {&(0x7f0000000a80)="6c26d3b7f99f90e265d3bf2ed3e3a33fdb5bb8b071ed6295299a1bd5b2b495160ff3a5b3522f34301e9f74ea49f2f3541f5fab7e9126cb3e08195184bcd6a254a49d8e9f24fdc5aea59c055d33bfc2ab1e15287d6f3c8770f2c0ee537dd4315b5ff3ae12991581", 0x67}, {&(0x7f0000000b00)="265555a36dd9736dc1bd08359c70d908cc7e3eaeb9536468fe64cf0ecd5cc20c903636fbfbe148d8038ce528073835b1cbcd587e529133ccc0b931c2f153ce776e02e32e3a04bdcd4780dc2bb962e5c4e4b0273928985c2b0095c0b7016c12d3b69e05a55456cd25780917854e2d429bb592b3cdaefc8b70aa9245bab10b1cc0b777e3d6b0779e73e427b6187ebe8a7cf80b41471a1cd80ba6d56ac1a48fec44f00d63edff027e249559cf3ee23df387fe3aee89c52fa43d491e6260ce9f78281161c8419e41a6b6c2231dc8c40826", 0xcf}, {&(0x7f0000000040)="e434", 0x2}, {&(0x7f0000000c00)="d25901ba40e8e1d916731cf7a354e8a03680413f3968e9", 0x17}], 0x8, 0x0, 0x0, 0x1400c840}], 0x2, 0x20000080)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9feb0147fccd697dfd6e63830018000000000000001800000018000000000000000c020000000000000f000000b0a065a04848af8783a4e740213faeb23e78fced9c6749193e10e2e377665d7f476d00000000000000"], 0x0, 0x34}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x2)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
epoll_create(0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf2503000000180001801400020073797a5f74756e000000000000ffbf92981e0000000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x6080)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
epoll_create1(0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
unshare(0x20000400)

kernel console output (not intermixed with test programs):

="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5dd5f9c629 code=0x7ffc0000
[ 1638.674260][   T30] audit: type=1326 audit(1645.509:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd5f9c629 code=0x7ffc0000
[ 1638.711711][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1638.810829][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1638.897325][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1638.979919][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1639.062586][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1639.145683][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1639.228137][T29411] vxcan1 speed is unknown, defaulting to 1000
[ 1639.353292][T17495] vxcan1 speed is unknown, defaulting to 1000
[ 1639.367771][   T30] audit: type=1326 audit(1645.509:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd5f9c629 code=0x7ffc0000
[ 1639.381742][T19915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.429309][   T30] audit: type=1326 audit(1645.509:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5dd5f9c629 code=0x7ffc0000
[ 1639.490535][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1639.890518][T29445] program syz.3.6357 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1640.562639][T19915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1640.839904][T13762] IPVS: starting estimator thread 0...
[ 1640.929611][T29453] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1641.017417][T29455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29455 comm=syz.0.6360
[ 1641.170398][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1641.571607][T19915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1641.976376][T19915] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1642.129590][T19915] usb 2-1: Using ep0 maxpacket: 8
[ 1642.145027][T19915] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[ 1642.164638][T19915] usb 2-1: config 6 has no interface number 0
[ 1642.184924][T19915] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1642.209205][T19915] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1642.315068][T19915] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1642.329557][T19915] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1642.361784][T19915] usb 2-1: Product: syz
[ 1642.627877][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1642.650737][T19915] usb 2-1: Manufacturer: syz
[ 1642.720364][T19915] usb 2-1: SerialNumber: syz
[ 1643.440461][T19915] hso 2-1:6.2: Failed to find BULK IN ep
[ 1643.469812][T19915] usb 2-1: USB disconnect, device number 120
[ 1643.546006][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1643.546035][   T30] audit: type=1400 audit(1651.509:3648): avc:  denied  { shutdown } for  pid=29501 comm="syz.0.6373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1643.660146][T13762] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1643.875174][T29510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29510 comm=syz.5.6374
[ 1643.885591][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1643.887806][T13762] usb 5-1: Using ep0 maxpacket: 32
[ 1643.911875][T13762] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1643.941578][T13762] usb 5-1: config 5 has an invalid interface number: 136 but max is 1
[ 1643.973637][T13762] usb 5-1: config 5 has an invalid interface number: 60 but max is 1
[ 1643.991118][T13762] usb 5-1: config 5 has no interface number 0
[ 1643.999310][T13762] usb 5-1: config 5 has no interface number 1
[ 1644.022110][T13762] usb 5-1: config 5 interface 136 has no altsetting 0
[ 1644.029414][T13762] usb 5-1: config 5 interface 60 has no altsetting 0
[ 1644.097370][T13762] usb 5-1: New USB device found, idVendor=05c6, idProduct=920c, bcdDevice=c9.62
[ 1644.109683][T13762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1644.137090][T13762] usb 5-1: Product: syz
[ 1644.194496][T13762] usb 5-1: Manufacturer: syz
[ 1644.283402][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1644.291944][T13762] usb 5-1: SerialNumber: syz
[ 1644.690821][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1644.842513][T13762] usb 5-1: unknown number of interfaces: 2
[ 1644.853351][T13762] usb 5-1: USB disconnect, device number 11
[ 1645.061192][T29539] CUSE: info not properly terminated
[ 1645.262972][T29538] overlayfs: overlapping lowerdir path
[ 1645.353984][T29540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1645.362652][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1645.592975][T19915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1646.602366][T29556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29556 comm=syz.0.6385
[ 1646.615874][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.331559][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1647.594462][T29565] FAULT_INJECTION: forcing a failure.
[ 1647.594462][T29565] name failslab, interval 1, probability 0, space 0, times 0
[ 1647.624064][T29565] CPU: 1 UID: 0 PID: 29565 Comm: syz.5.6387 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1647.624092][T29565] Tainted: [L]=SOFTLOCKUP
[ 1647.624098][T29565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1647.624109][T29565] Call Trace:
[ 1647.624115][T29565]  <TASK>
[ 1647.624122][T29565]  dump_stack_lvl+0x100/0x190
[ 1647.624154][T29565]  should_fail_ex.cold+0x5/0xa
[ 1647.624177][T29565]  should_failslab+0xc2/0x120
[ 1647.624205][T29565]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1647.624228][T29565]  ? skb_clone+0x190/0x400
[ 1647.624251][T29565]  skb_clone+0x190/0x400
[ 1647.624268][T29565]  netlink_deliver_tap+0xaed/0xcc0
[ 1647.624292][T29565]  netlink_unicast+0x650/0x870
[ 1647.624314][T29565]  ? __pfx_netlink_unicast+0x10/0x10
[ 1647.624341][T29565]  netlink_sendmsg+0x8b0/0xda0
[ 1647.624366][T29565]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1647.624384][T29565]  ? PageHuge+0x170/0x180
[ 1647.624411][T29565]  ____sys_sendmsg+0xa54/0xc30
[ 1647.624435][T29565]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1647.624468][T29565]  ___sys_sendmsg+0x190/0x1e0
[ 1647.624492][T29565]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1647.624539][T29565]  __sys_sendmsg+0x170/0x220
[ 1647.624555][T29565]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1647.624580][T29565]  do_syscall_64+0x106/0xf80
[ 1647.624596][T29565]  ? clear_bhb_loop+0x40/0x90
[ 1647.624616][T29565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1647.624632][T29565] RIP: 0033:0x7f126239c629
[ 1647.624647][T29565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1647.624663][T29565] RSP: 002b:00007f126329b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1647.624680][T29565] RAX: ffffffffffffffda RBX: 00007f1262615fa0 RCX: 00007f126239c629
[ 1647.624691][T29565] RDX: 0000000020000084 RSI: 0000200000004340 RDI: 0000000000000003
[ 1647.624701][T29565] RBP: 00007f126329b090 R08: 0000000000000000 R09: 0000000000000000
[ 1647.624711][T29565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1647.624721][T29565] R13: 00007f1262616038 R14: 00007f1262615fa0 R15: 00007fffeb170a88
[ 1647.624742][T29565]  </TASK>
[ 1647.641402][   T30] audit: type=1400 audit(1655.599:3649): avc:  denied  { map } for  pid=29562 comm="syz.4.6386" path="socket:[97095]" dev="sockfs" ino=97095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[ 1647.929568][T17495] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1648.174570][T17495] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[ 1648.235338][T29581] CUSE: info not properly terminated
[ 1648.625911][T17495] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1648.652273][T17495] usb 5-1: config 0 has no interface number 0
[ 1648.662005][T17495] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1648.674181][T17495] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1648.685502][T17495] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1648.697386][T17495] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[ 1648.713360][T17495] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1648.740744][T17495] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1648.759178][T17495] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1648.769955][T17495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.778711][T17495] usb 5-1: Product: syz
[ 1648.784350][T17495] usb 5-1: Manufacturer: syz
[ 1648.788950][T17495] usb 5-1: SerialNumber: syz
[ 1648.796381][T17495] usb 5-1: config 0 descriptor??
[ 1648.802149][T29563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1648.813880][T17495] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 130 is not bulk.
[ 1648.827045][T17495] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[ 1649.018763][T19915] usb 5-1: USB disconnect, device number 12
[ 1649.103981][T29588] CUSE: info not properly terminated
[ 1650.473660][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1650.496338][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6397'.
[ 1650.506071][T29600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1650.513198][T29600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1651.015041][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1651.100287][T29609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29609 comm=syz.1.6398
[ 1651.627267][   T30] audit: type=1326 audit(1659.599:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29621 comm="syz.0.6404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x0
[ 1651.851023][T17495] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1652.009576][T17495] usb 2-1: Using ep0 maxpacket: 16
[ 1652.016445][T17495] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1652.065781][T17495] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1652.081486][T17495] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1652.160532][T29643] CUSE: info not properly terminated
[ 1652.185337][T29643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1652.194311][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1652.293247][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1652.505241][T17495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.513307][T17495] usb 2-1: Product: syz
[ 1652.517458][T17495] usb 2-1: Manufacturer: syz
[ 1652.522094][T17495] usb 2-1: SerialNumber: syz
[ 1652.528805][T17495] usb 2-1: config 0 descriptor??
[ 1652.583638][T26038] block nbd3: Receive control failed (result -32)
[ 1652.774734][T29651] lo speed is unknown, defaulting to 1000
[ 1652.794471][T17495] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input93
[ 1652.797333][T29651] vxcan1 speed is unknown, defaulting to 1000
[ 1652.929776][T29655] comedi comedi0: Minor 3 could not be opened
[ 1653.548727][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1653.657424][T17495] rc_core: IR keymap rc-imon-pad not found
[ 1653.677528][T17495] Registered IR keymap rc-empty
[ 1653.686773][T17495] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1653.698829][T17495] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1653.781871][T17495] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1653.886026][T17495] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input94
[ 1653.936669][T17495] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:121> initialized
[ 1654.133558][T29669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29669 comm=syz.4.6413
[ 1654.644211][    C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1654.651734][T17495] usb 2-1: USB disconnect, device number 121
[ 1655.123274][T29688] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6418'.
[ 1655.159587][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1655.334326][   T10] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1655.344021][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.690498][   T10] usb 6-1: config 0 descriptor??
[ 1655.706251][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1656.027584][T29702] netlink: 'syz.3.6421': attribute type 3 has an invalid length.
[ 1656.038485][T29702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6421'.
[ 1656.075166][T29704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6422'.
[ 1656.088349][T29704] openvswitch: netlink: Message has 8 unknown bytes.
[ 1656.140627][   T10] cpia1 6-1:0.0: unexpected state after lo power cmd: ea
[ 1656.373906][T29710] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1656.610119][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1656.746996][   T10] gspca_cpia1: usb_control_msg 01, error -71
[ 1656.759776][   T30] audit: type=1326 audit(1664.359:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1656.790662][   T30] audit: type=1326 audit(1664.359:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1656.791157][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1656.814097][   T30] audit: type=1326 audit(1664.359:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1656.821780][   T10] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[ 1656.913713][   T30] audit: type=1326 audit(1664.359:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1657.085875][   T30] audit: type=1326 audit(1664.359:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1657.157039][   T30] audit: type=1326 audit(1664.359:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1657.238694][T29716] can0: slcan on ttyS3.
[ 1657.563146][   T10] usb 6-1: USB disconnect, device number 2
[ 1657.603423][   T30] audit: type=1326 audit(1664.359:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1657.971556][T29716] can0 (unregistered): slcan off ttyS3.
[ 1658.004705][   T30] audit: type=1326 audit(1664.359:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1658.099768][   T30] audit: type=1326 audit(1664.359:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1658.124996][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1658.184337][T29728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29728 comm=syz.0.6426
[ 1658.186239][   T30] audit: type=1326 audit(1664.359:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29706 comm="syz.1.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1659.580002][T29753] syzkaller0: entered promiscuous mode
[ 1659.589579][T29753] syzkaller0: entered allmulticast mode
[ 1659.629080][T29753] tipc: Started in network mode
[ 1659.653834][T29753] tipc: Node identity 0680e8e37b8b, cluster identity 4711
[ 1659.655557][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1659.743990][T29753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1659.820733][T29752] tipc: Resetting bearer <eth:syzkaller0>
[ 1659.910390][T29752] tipc: Disabling bearer <eth:syzkaller0>
[ 1661.293752][T29780] CUSE: info not properly terminated
[ 1661.991497][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1661.991513][   T30] audit: type=1400 audit(1669.969:3665): avc:  denied  { map } for  pid=29776 comm="syz.1.6437" path="socket:[98989]" dev="sockfs" ino=98989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1662.055747][T29788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29788 comm=syz.4.6441
[ 1662.167244][ T5889] IPVS: starting estimator thread 0...
[ 1662.450003][T29795] IPVS: using max 37 ests per chain, 88800 per kthread
[ 1662.531412][T18757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1662.690321][T26511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1663.199417][T29810] syzkaller0: entered promiscuous mode
[ 1663.205920][T29810] syzkaller0: entered allmulticast mode
[ 1664.014975][  T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1664.378123][   T30] audit: type=1326 audit(1672.349:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29823 comm="syz.3.6439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dd5f9c629 code=0x0
[ 1664.699919][T29839] Bluetooth: MGMT ver 1.23
[ 1664.865435][T29847] Invalid logical block size (4194304)
[ 1665.588843][T29862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29862 comm=syz.5.6456
[ 1665.774519][T26511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1666.249191][T29874] hub 2-0:1.0: USB hub found
[ 1666.254146][T29874] hub 2-0:1.0: 1 port detected
[ 1666.479355][T29885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6461'.
[ 1666.660546][T29892] kAFS: unparsable volume name
[ 1667.071170][T29898] CUSE: info not properly terminated
[ 1667.563342][   T30] audit: type=1326 audit(1675.539:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29899 comm="syz.3.6465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dd5f9c629 code=0x0
[ 1668.251918][T29908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29908 comm=syz.0.6468
[ 1668.301363][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1668.866205][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.286319][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.346547][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.410217][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.421648][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.450453][T29918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.482228][T29919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.556892][T29919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.578110][T11827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1669.748340][T29937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6473'.
[ 1669.786893][T29938] netlink: 'syz.5.6475': attribute type 1 has an invalid length.
[ 1669.931726][T29942] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1669.989925][T29942] bond1: (slave vxcan3): Error -95 calling set_mac_address
[ 1670.073848][T29944] bond1: (slave bridge1): Enslaving as an active interface with a down link
[ 1670.149688][ T5929] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1670.439598][ T5929] usb 4-1: Using ep0 maxpacket: 16
[ 1670.460629][T29938] macvlan2: entered promiscuous mode
[ 1670.465945][T29938] macvlan2: entered allmulticast mode
[ 1670.517735][T29938] bond1: entered promiscuous mode
[ 1670.530625][T29938] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1670.574439][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1670.596282][ T5929] usb 4-1: can't read configurations, error -61
[ 1670.672734][T29938] bond1: left promiscuous mode
[ 1670.819675][ T5929] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1670.963599][   T30] audit: type=1400 audit(1678.939:3668): avc:  denied  { mounton } for  pid=29957 comm="syz.4.6480" path="/50/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1670.991923][ T5929] usb 4-1: Using ep0 maxpacket: 16
[ 1671.022373][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1671.032487][ T5929] usb 4-1: can't read configurations, error -61
[ 1671.046928][ T5929] usb usb4-port1: attempt power cycle
[ 1671.054215][   T30] audit: type=1400 audit(1678.939:3669): avc:  denied  { remount } for  pid=29957 comm="syz.4.6480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1671.114877][   T30] audit: type=1326 audit(1678.969:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.0.6481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x0
[ 1671.360156][T29968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29968 comm=syz.1.6482
[ 1671.429555][ T5929] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1671.452610][ T5929] usb 4-1: Using ep0 maxpacket: 16
[ 1671.468931][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1671.481438][ T5929] usb 4-1: can't read configurations, error -61
[ 1671.769573][ T5929] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1671.783246][   T30] audit: type=1400 audit(1679.759:3671): avc:  denied  { unmount } for  pid=28680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1671.836965][ T5929] usb 4-1: Using ep0 maxpacket: 16
[ 1671.853464][ T5929] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1671.869210][ T5929] usb 4-1: can't read configurations, error -61
[ 1671.887505][ T5929] usb usb4-port1: unable to enumerate USB device
[ 1673.955583][ T5889] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1674.050078][ T1162] net_ratelimit: 2 callbacks suppressed
[ 1674.050096][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1674.229513][ T5889] usb 1-1: Using ep0 maxpacket: 16
[ 1674.248622][ T5889] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[ 1674.254903][   T30] audit: type=1326 audit(1682.219:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29979 comm="syz.3.6486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dd5f9c629 code=0x0
[ 1674.299165][ T5889] usb 1-1: config 0 has no interface number 0
[ 1674.346494][ T5889] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[ 1674.394417][ T5889] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1674.439672][ T5889] usb 1-1: config 0 interface 48 has no altsetting 0
[ 1674.467595][ T5889] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[ 1674.510735][ T5889] usb 1-1: config 0 has no interface number 0
[ 1674.517278][ T5889] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[ 1674.554292][ T5889] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1674.588490][ T5889] usb 1-1: config 0 interface 48 has no altsetting 0
[ 1674.599445][ T5889] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[ 1674.607980][ T5889] usb 1-1: config 0 has no interface number 0
[ 1674.644584][ T5889] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[ 1674.690076][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1674.721588][ T5889] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1674.833176][ T5889] usb 1-1: config 0 interface 48 has no altsetting 0
[ 1675.163665][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1675.192658][ T5889] usb 1-1: string descriptor 0 read error: -71
[ 1675.211445][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 1675.279558][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1675.346475][ T5889] usb 1-1: config 0 descriptor??
[ 1675.379712][T29996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6491'.
[ 1675.398303][T29997] macvtap1: entered promiscuous mode
[ 1675.403974][ T5889] usb 1-1: can't set config #0, error -71
[ 1675.422419][ T5889] usb 1-1: USB disconnect, device number 126
[ 1675.426404][T29996] openvswitch: netlink: Key type 796 is out of range max 32
[ 1675.438477][T29997] macvtap1: entered allmulticast mode
[ 1675.448853][T30001] program syz.5.6490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1675.472674][T29997] dummy0: entered promiscuous mode
[ 1675.751081][T29997] dummy0: entered allmulticast mode
[ 1675.788801][   T30] audit: type=1400 audit(1683.759:3673): avc:  denied  { ioctl } for  pid=29993 comm="syz.1.6493" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1675.820183][   T30] audit: type=1400 audit(1683.799:3674): avc:  denied  { ioctl } for  pid=29993 comm="syz.1.6493" path="socket:[99894]" dev="sockfs" ino=99894 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1675.847217][T29997] team0: Device macvtap1 failed to register rx_handler
[ 1675.889001][T29997] dummy0: left allmulticast mode
[ 1675.902417][T29997] dummy0: left promiscuous mode
[ 1675.925977][   T30] audit: type=1326 audit(1683.899:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30006 comm="syz.0.6495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x0
[ 1676.137580][T30013] syzkaller0: entered promiscuous mode
[ 1676.143437][T30013] syzkaller0: entered allmulticast mode
[ 1677.072694][T30030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6499'.
[ 1677.117227][T30020] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 1677.191074][T30030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6499'.
[ 1677.226250][T30020] File: /dev/nullb0 PID: 30020 Comm: syz.3.6497
[ 1677.411671][T30034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30034 comm=syz.1.6501
[ 1677.511685][T30038] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6500'.
[ 1678.267512][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1678.635287][T30056] netlink: 94 bytes leftover after parsing attributes in process `syz.4.6504'.
[ 1679.136139][   T30] audit: type=1326 audit(1687.109:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30072 comm="syz.4.6510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba39c629 code=0x0
[ 1679.906845][T30088] overlay: Unknown parameter '/'
[ 1680.204538][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1680.895890][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1681.212637][ T5889] usb 1-1: new low-speed USB device number 127 using dummy_hcd
[ 1681.242379][T30100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6518'.
[ 1681.329689][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6518'.
[ 1681.338764][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1681.685787][ T5889] usb 1-1: string descriptor 0 read error: -22
[ 1681.701527][ T5889] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[ 1681.743934][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.797637][ T5889] usb 1-1: config 0 descriptor??
[ 1681.869769][ T5889] usbtest 1-1:0.0: FX2 device
[ 1681.883636][ T5889] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[ 1682.471508][T19915] usb 1-1: USB disconnect, device number 127
[ 1683.902664][T30125] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1684.319601][ T5929] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1684.513522][T30103] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1684.534434][T26511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1684.618028][T30135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1684.638524][T30135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1684.669762][T17495] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1684.689642][ T5929] usb 2-1: Using ep0 maxpacket: 32
[ 1684.700018][ T5929] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[ 1684.709670][ T5929] usb 2-1: config 0 has no interface number 0
[ 1684.715811][ T5929] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1684.749185][ T5929] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1684.765298][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1684.787423][ T5929] usb 2-1: Product: syz
[ 1684.797275][ T5929] usb 2-1: Manufacturer: syz
[ 1684.813877][ T5929] usb 2-1: SerialNumber: syz
[ 1684.819613][T17495] usb 5-1: Using ep0 maxpacket: 8
[ 1684.828444][T17495] usb 5-1: config 0 has an invalid interface number: 4 but max is 0
[ 1684.838698][ T5929] usb 2-1: config 0 descriptor??
[ 1684.850400][T26511] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1684.863987][T17495] usb 5-1: config 0 has no interface number 0
[ 1684.870685][T30129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1684.878139][   T30] audit: type=1400 audit(1692.839:3677): avc:  denied  { search } for  pid=30136 comm="syz.5.6527" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1684.911528][T17495] usb 5-1: config 0 interface 4 has no altsetting 0
[ 1684.924828][T17495] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1684.938754][T17495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1684.948494][   T30] audit: type=1400 audit(1692.839:3678): avc:  denied  { search } for  pid=30136 comm="syz.5.6527" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1684.971778][T17495] usb 5-1: Product: syz
[ 1685.009813][T26511] usb 4-1: Using ep0 maxpacket: 32
[ 1685.076528][T17495] usb 5-1: Manufacturer: syz
[ 1685.099791][T26511] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[ 1685.207850][T17495] usb 5-1: SerialNumber: syz
[ 1685.230181][T30129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1685.309993][T26511] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1685.326896][   T30] audit: type=1400 audit(1692.839:3679): avc:  denied  { search } for  pid=30136 comm="syz.5.6527" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1685.358233][T17495] usb 5-1: config 0 descriptor??
[ 1685.386892][T17495] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1685.398816][T26511] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1685.416114][T17495] usb 5-1: setting power ON
[ 1685.421419][T17495] dvb-usb: bulk message failed: -22 (2/0)
[ 1685.438412][T26511] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1685.448740][T26511] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1685.469046][T17495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1685.478532][T26511] usb 4-1: Product: syz
[ 1685.483523][T26511] usb 4-1: Manufacturer: syz
[ 1685.488337][T26511] usb 4-1: SerialNumber: syz
[ 1685.493413][T17495] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1685.502615][T17495] usb 5-1: media controller created
[ 1685.530082][ T5929] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1685.550015][T26511] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input95
[ 1685.573316][ T5929] asix 2-1:0.188: probe with driver asix failed with error -32
[ 1685.602269][T30130] dvb-usb: bulk message failed: -22 (3/0)
[ 1685.607991][T30130] cxusb: i2c rd: len=1792 is too big!
[ 1685.607991][T30130] 
[ 1685.622175][T17495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1685.683730][T17495] usb 5-1: digital interface selection failed (-22)
[ 1685.709595][T17495] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1685.745186][T26511] usb 4-1: USB disconnect, device number 91
[ 1685.770411][T17495] usb 5-1: setting power OFF
[ 1685.779079][T17495] dvb-usb: bulk message failed: -22 (2/0)
[ 1685.789577][T17495] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1685.807964][T17495] (NULL device *): no alternate interface
[ 1685.873378][T26511] appletouch 4-1:1.0: input: appletouch disconnected
[ 1686.209803][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1686.221369][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1686.281418][   T30] audit: type=1400 audit(1694.259:3680): avc:  denied  { mounton } for  pid=30128 comm="syz.1.6525" path="/proc/517/task" dev="proc" ino=100871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1686.329613][T19915] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 1686.337678][T11346] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1686.386484][   T30] audit: type=1400 audit(1694.289:3681): avc:  denied  { associate } for  pid=30168 comm="syz.1.6525" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1686.543094][T26038] Bluetooth: hci1: unexpected event for opcode 0x2023
[ 1686.559653][T11346] usb 6-1: Using ep0 maxpacket: 16
[ 1686.566404][T19915] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1686.576547][T19915] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1686.583617][T19915] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[ 1686.593043][T19915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1686.601176][T11346] usb 6-1: config 252 has an invalid interface number: 165 but max is 0
[ 1686.611477][T11346] usb 6-1: config 252 has no interface number 0
[ 1686.617732][T11346] usb 6-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[ 1686.621870][   T30] audit: type=1400 audit(1694.439:3682): avc:  denied  { accept } for  pid=30169 comm="syz.3.6532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1686.633776][T11346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1686.656595][T19915] usb 1-1: config 0 descriptor??
[ 1686.791019][T11346] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[ 1686.829385][T11346] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1686.876263][T30161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6531'.
[ 1686.928144][T30161] vlan2: entered allmulticast mode
[ 1686.955083][T30161] team0: entered allmulticast mode
[ 1686.994589][T30161] team_slave_0: entered allmulticast mode
[ 1687.000581][T30161] team_slave_1: entered allmulticast mode
[ 1687.116705][T30178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1687.138081][T30178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1687.383664][ T5474] veth1_macvtap: left promiscuous mode
[ 1687.479279][T17495] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1687.533346][T17495] usb 5-1: USB disconnect, device number 13
[ 1687.622956][T26511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1687.884059][T19915] usbhid 1-1:0.0: can't add hid device: -71
[ 1687.895760][T19915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1687.903665][   T30] audit: type=1400 audit(1695.869:3683): avc:  denied  { mounton } for  pid=30182 comm="syz.4.6533" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1687.929775][T19915] usb 1-1: USB disconnect, device number 2
[ 1687.930376][T30184] nfs4: Unknown parameter 'ê?Qú%	'
[ 1688.318894][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.327533][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.336057][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.345772][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.354133][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.364507][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.374255][T30197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1688.550736][T30208] pim6reg: entered allmulticast mode
[ 1688.951465][T30212] pim6reg: left allmulticast mode
[ 1689.823459][T30217] overlay: Unknown parameter '/'
[ 1689.895280][T17495] usb 6-1: USB disconnect, device number 3
[ 1689.920922][   T30] audit: type=1326 audit(1697.899:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30209 comm="syz.0.6538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff25219c629 code=0x0
[ 1690.345764][T30234] can0: slcan on ttyS3.
[ 1690.549542][   T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1690.609192][T17495] usb 2-1: USB disconnect, device number 122
[ 1690.703316][   T10] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1690.716285][   T10] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[ 1690.871502][   T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1690.883175][   T10] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1690.896560][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1690.906001][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1691.068130][T30244] overlay: Unknown parameter '/'
[ 1691.271433][   T10] ath6kl: Failed to submit usb control message: -71
[ 1691.330910][T17598] net_ratelimit: 2 callbacks suppressed
[ 1691.330922][T17598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1691.351574][   T10] ath6kl: unable to send the bmi data to the device: -71
[ 1691.440835][   T10] ath6kl: Unable to send get target info: -71
[ 1691.449907][   T10] ath6kl: Failed to init ath6kl core: -71
[ 1691.472995][   T10] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1691.562305][T30225] can0 (unregistered): slcan off ttyS3.
[ 1691.586207][   T10] usb 4-1: USB disconnect, device number 92
[ 1691.851402][   T30] audit: type=1326 audit(1699.829:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30258 comm="syz.3.6548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dd5f9c629 code=0x0
[ 1691.971320][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1692.074325][   T30] audit: type=1400 audit(1700.049:3686): avc:  denied  { name_bind 0x1000000 } for  pid=30261 comm="syz.5.6547" path="socket:[101691]" dev="sockfs" ino=101691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1692.348225][T30269] lo speed is unknown, defaulting to 1000
[ 1692.391212][T30269] vxcan1 speed is unknown, defaulting to 1000
[ 1692.759552][T30283] FAULT_INJECTION: forcing a failure.
[ 1692.759552][T30283] name failslab, interval 1, probability 0, space 0, times 0
[ 1693.052003][T30283] CPU: 1 UID: 0 PID: 30283 Comm: syz.3.6554 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1693.052033][T30283] Tainted: [L]=SOFTLOCKUP
[ 1693.052040][T30283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1693.052050][T30283] Call Trace:
[ 1693.052057][T30283]  <TASK>
[ 1693.052063][T30283]  dump_stack_lvl+0x100/0x190
[ 1693.052095][T30283]  should_fail_ex.cold+0x5/0xa
[ 1693.052117][T30283]  should_failslab+0xc2/0x120
[ 1693.052144][T30283]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1693.052167][T30283]  ? skb_clone+0x190/0x400
[ 1693.052188][T30283]  skb_clone+0x190/0x400
[ 1693.052205][T30283]  nfnetlink_rcv_batch+0x1cc/0x2880
[ 1693.052233][T30283]  ? kmem_cache_free+0x124/0x6a0
[ 1693.052257][T30283]  ? __lock_acquire+0x4a5/0x2630
[ 1693.052286][T30283]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1693.052310][T30283]  ? find_held_lock+0x2b/0x80
[ 1693.052343][T30283]  ? avc_has_perm_noaudit+0x145/0x3b0
[ 1693.052370][T30283]  ? __asan_memset+0x23/0x50
[ 1693.052390][T30283]  ? __nla_validate_parse+0x1e7/0x28b0
[ 1693.052416][T30283]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1693.052435][T30283]  ? rcu_is_watching+0x12/0xc0
[ 1693.052456][T30283]  ? cap_capable+0x107/0x460
[ 1693.052487][T30283]  ? __nla_parse+0x40/0x60
[ 1693.052508][T30283]  nfnetlink_rcv+0x3bd/0x440
[ 1693.052533][T30283]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1693.052564][T30283]  netlink_unicast+0x5aa/0x870
[ 1693.052588][T30283]  ? __pfx_netlink_unicast+0x10/0x10
[ 1693.052616][T30283]  netlink_sendmsg+0x8b0/0xda0
[ 1693.052640][T30283]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1693.052658][T30283]  ? PageHuge+0x170/0x180
[ 1693.052687][T30283]  ____sys_sendmsg+0xa54/0xc30
[ 1693.052712][T30283]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1693.052742][T30283]  ___sys_sendmsg+0x190/0x1e0
[ 1693.052767][T30283]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1693.052818][T30283]  __sys_sendmsg+0x170/0x220
[ 1693.052836][T30283]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1693.052869][T30283]  do_syscall_64+0x106/0xf80
[ 1693.052886][T30283]  ? clear_bhb_loop+0x40/0x90
[ 1693.052908][T30283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1693.052932][T30283] RIP: 0033:0x7f5dd5f9c629
[ 1693.052948][T30283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1693.052965][T30283] RSP: 002b:00007f5dd41f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1693.052983][T30283] RAX: ffffffffffffffda RBX: 00007f5dd6215fa0 RCX: 00007f5dd5f9c629
[ 1693.052994][T30283] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1693.053005][T30283] RBP: 00007f5dd41f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1693.053016][T30283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1693.053026][T30283] R13: 00007f5dd6216038 R14: 00007f5dd6215fa0 R15: 00007ffc7098e758
[ 1693.053050][T30283]  </TASK>
[ 1693.733507][T26511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1693.751263][T17495] usb 4-1: new full-speed USB device number 93 using dummy_hcd
[ 1694.091064][T30302] input: syz0 as /devices/virtual/input/input96
[ 1694.186120][T17495] usb 4-1: not running at top speed; connect to a high speed hub
[ 1694.198626][T17495] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1694.238504][T17495] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1694.290395][T17495] usb 4-1: too many endpoints for config 1 interface 0 altsetting 4: 225, using maximum allowed: 30
[ 1694.339554][T17495] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 225
[ 1694.385689][T17495] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1694.401400][T17495] usb 4-1: New USB device found, idVendor=05ac, idProduct=6c30, bcdDevice= 0.40
[ 1694.417325][T17495] usb 4-1: New USB device strings: Mfr=4, Product=2, SerialNumber=3
[ 1694.434324][T17495] usb 4-1: Product: syz
[ 1694.448771][T17495] usb 4-1: Manufacturer: syz
[ 1694.459412][T17495] usb 4-1: SerialNumber: syz
[ 1694.782224][   T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1694.802727][T30321] SET target dimension over the limit!
[ 1694.814008][T30321] veth1_macvtap: renamed from veth0_vlan (while UP)
[ 1694.982088][   T29] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1694.990922][T30325] x_tables: duplicate underflow at hook 3
[ 1694.991356][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.062260][   T29] usb 6-1: config 0 descriptor??
[ 1695.253183][   T30] audit: type=1326 audit(1703.229:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30328 comm="syz.0.6564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x0
[ 1695.501056][   T29] usb 6-1: Cannot read MAC address
[ 1695.514682][   T29] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1695.550576][   T29] usb 6-1: USB disconnect, device number 4
[ 1695.821647][T30325] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1695.827705][T30325] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1695.836016][T30325] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1695.842742][T30325] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1695.851053][T30325] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1695.859296][T30325] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1695.865359][T30325] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1695.873142][T30325] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1695.881574][T30325] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1695.887592][T30325] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1695.903734][T30325] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1696.436668][ T5929] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1696.456249][T17495] usb 4-1: USB disconnect, device number 93
[ 1696.456954][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.770042][ T5929] usb 2-1: Using ep0 maxpacket: 8
[ 1696.866103][ T5929] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1696.866920][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.874431][ T5929] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1696.893962][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.925861][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1696.943996][ T5929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1696.954264][ T5929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1696.973229][T30350] xt_socket: unknown flags 0x8
[ 1697.269769][ T5822] Bluetooth: hci1: command 0x0406 tx timeout
[ 1697.302870][ T5929] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1697.316266][ T5929] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1697.373014][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1697.664500][T30359] lo speed is unknown, defaulting to 1000
[ 1697.672364][T30359] vxcan1 speed is unknown, defaulting to 1000
[ 1697.756835][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1697.809574][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[ 1697.896142][ T5822] Bluetooth: hci3: command 0x0405 tx timeout
[ 1697.904937][T26001] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1697.913144][T26001] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1697.999529][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1698.032030][   T10] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 1698.041456][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1698.063964][   T10] usb 1-1: Product: syz
[ 1698.078967][   T10] usb 1-1: Manufacturer: syz
[ 1698.094480][   T10] usb 1-1: SerialNumber: syz
[ 1698.121689][   T10] usb 1-1: config 0 descriptor??
[ 1698.142489][   T10] usb 1-1: no audio or video endpoints found
[ 1698.153325][T30364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6566'.
[ 1698.253142][T26001] Bluetooth: hci1: unexpected event for opcode 0x0000
[ 1698.722679][ T5889] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1699.061480][   T29] usb 1-1: USB disconnect, device number 3
[ 1699.180776][ T5889] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1699.214226][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1699.222701][   T10] usb 2-1: USB disconnect, device number 123
[ 1699.257714][ T5889] usb 5-1: config 0 descriptor??
[ 1699.264872][   T30] audit: type=1326 audit(1707.239:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30376 comm="syz.1.6578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x0
[ 1699.295228][ T5889] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1699.669919][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1699.763708][ T5889] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[ 1699.885001][T30387] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6581'.
[ 1699.916237][   T10] usb 6-1: device descriptor read/64, error -71
[ 1699.970112][ T5822] Bluetooth: hci3: command 0x0405 tx timeout
[ 1699.976165][T26038] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1699.982591][T26001] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1700.004123][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1700.161841][T30397] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1700.179875][   T30] audit: type=1326 audit(1708.149:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.260114][   T30] audit: type=1326 audit(1708.149:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.389775][   T29] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1700.468362][   T30] audit: type=1326 audit(1708.149:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.478496][ T5889] gspca_cpia1: usb_control_msg 02, error -71
[ 1700.491895][ T5929] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 1700.502231][ T5889] cpia1 5-1:0.0: only firmware version 1 is supported (got: 234)
[ 1700.515174][ T5889] usb 5-1: USB disconnect, device number 14
[ 1700.521431][   T30] audit: type=1326 audit(1708.149:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.548696][   T30] audit: type=1326 audit(1708.149:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.573475][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1700.585922][   T30] audit: type=1326 audit(1708.149:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.609797][   T30] audit: type=1326 audit(1708.149:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.609882][   T29] usb 4-1: Using ep0 maxpacket: 32
[ 1700.633840][   T30] audit: type=1326 audit(1708.149:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.661366][   T30] audit: type=1326 audit(1708.149:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.667087][   T29] usb 4-1: config 0 has an invalid interface number: 227 but max is 0
[ 1700.686272][   T30] audit: type=1326 audit(1708.149:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.712497][   T29] usb 4-1: config 0 has no interface number 0
[ 1700.723924][   T29] usb 4-1: config 0 interface 227 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[ 1700.724023][   T30] audit: type=1326 audit(1708.149:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30390 comm="syz.0.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1700.761843][   T10] usb 6-1: device descriptor read/64, error -71
[ 1700.809809][   T29] usb 4-1: New USB device found, idVendor=0d83, idProduct=28bc, bcdDevice=7a.80
[ 1700.824562][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.839591][   T29] usb 4-1: Product: syz
[ 1700.846878][   T29] usb 4-1: Manufacturer: syz
[ 1700.854053][   T29] usb 4-1: SerialNumber: syz
[ 1700.879775][   T10] usb usb6-port1: attempt power cycle
[ 1700.895516][   T29] usb 4-1: config 0 descriptor??
[ 1700.916576][T30396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1700.956092][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1700.970643][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1700.988429][ T5929] usb 2-1: can't read configurations, error -71
[ 1701.145057][T30396] random: crng reseeded on system resumption
[ 1701.229678][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1701.237358][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1701.260322][T30396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1701.278876][   T10] usb 6-1: device descriptor read/8, error -71
[ 1701.401085][ T5889] usb 1-1: Using ep0 maxpacket: 16
[ 1701.423635][ T5889] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[ 1701.455209][ T5889] usb 1-1: config 0 has no interface number 0
[ 1701.478688][ T5889] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1701.577487][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1701.602993][ T5889] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1701.898216][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.941532][   T10] usb 6-1: device descriptor read/8, error -71
[ 1702.049656][T26001] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1702.055936][ T5822] Bluetooth: hci3: command 0x0405 tx timeout
[ 1702.061982][T26038] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1702.072720][ T5889] usb 1-1: Product: syz
[ 1702.104646][ T5889] usb 1-1: Manufacturer: syz
[ 1702.147717][ T5889] usb 1-1: SerialNumber: syz
[ 1702.151473][   T29] cdc_eem 4-1:0.227 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, 66:8a:a6:c1:29:2f
[ 1702.177594][ T5889] usb 1-1: config 0 descriptor??
[ 1702.185076][   T10] usb usb6-port1: unable to enumerate USB device
[ 1702.210659][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1702.290426][ T5822] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1702.302484][ T5822] Bluetooth: hci1: Injecting HCI hardware error event
[ 1702.315569][T26038] Bluetooth: hci1: hardware error 0x00
[ 1702.852342][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1702.861941][T11346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1702.871913][ T5889] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input98
[ 1702.882490][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.391805][ T5889] usb 1-1: USB disconnect, device number 4
[ 1703.503936][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1703.667156][T11346] usb 4-1: USB disconnect, device number 94
[ 1703.681838][T11346] cdc_eem 4-1:0.227 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device
[ 1703.908707][T30455] overlay: Unknown parameter '/'
[ 1704.208356][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1704.327405][T30468] syz2: rxe_newlink: already configured on vxcan1
[ 1704.350953][T11346] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1704.410520][T26038] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1704.580644][T11346] usb 5-1: Using ep0 maxpacket: 16
[ 1704.682384][T11346] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1704.700385][T30467] lo speed is unknown, defaulting to 1000
[ 1704.707521][T30467] vxcan1 speed is unknown, defaulting to 1000
[ 1704.710178][T30472] netlink: 'syz.1.6599': attribute type 10 has an invalid length.
[ 1704.735071][T11346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1704.754963][T11346] usb 5-1: Product: syz
[ 1704.758342][T30472] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1704.759121][T11346] usb 5-1: Manufacturer: syz
[ 1704.759138][T11346] usb 5-1: SerialNumber: syz
[ 1704.827779][T11346] usb 5-1: config 0 descriptor??
[ 1704.842477][T11346] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1705.179877][T11346] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[ 1705.193783][T19915] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1705.228192][T11346] usb 5-1: USB disconnect, device number 15
[ 1705.322597][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1705.322610][   T30] audit: type=1800 audit(1713.299:3718): pid=30494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.6604" name="bus" dev="tmpfs" ino=1095 res=0 errno=0
[ 1705.350584][  T792] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1705.395918][T19915] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[ 1705.405540][T19915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1705.424299][T19915] usb 2-1: Product: syz
[ 1705.428626][T19915] usb 2-1: Manufacturer: syz
[ 1705.433701][T19915] usb 2-1: SerialNumber: syz
[ 1705.460592][T19915] usb 2-1: config 0 descriptor??
[ 1705.518249][T26038] Bluetooth: hci4: urb ffff88805395d000 submission failed (2)
[ 1705.538154][  T792] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1705.560442][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1705.578889][  T792] usb 1-1: config 0 descriptor??
[ 1705.603883][  T792] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1705.653370][   T30] audit: type=1400 audit(1713.629:3719): avc:  denied  { append } for  pid=30506 comm="syz.3.6607" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1705.708112][   T29] usb 2-1: USB disconnect, device number 126
[ 1705.919399][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1706.903096][  T792] gspca_cpia1: usb_control_msg 03, error -110
[ 1706.979149][  T792] gspca_cpia1: usb_control_msg 01, error -32
[ 1708.069216][  T792] gspca_cpia1: usb_control_msg 02, error -110
[ 1708.076340][  T792] cpia1 1-1:0.0: only firmware version 1 is supported (got: 234)
[ 1708.145487][  T792] usb 1-1: USB disconnect, device number 5
[ 1708.489623][T30522] random: crng reseeded on system resumption
[ 1709.129593][T17598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.148288][T17598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.251146][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.265337][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.294711][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.304340][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1709.382275][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1710.565988][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6614'.
[ 1710.813347][T30554] zonefs (nullb0) ERROR: Not a zoned block device
[ 1710.999647][  T792] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[ 1711.179813][   T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1711.409244][  T792] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1711.467926][  T792] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1711.489628][  T792] usb 1-1: can't read configurations, error -71
[ 1711.580971][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1711.593333][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1711.606709][   T29] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1711.615950][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.634270][   T29] usb 6-1: config 0 descriptor??
[ 1711.874152][T30580] syzkaller0: entered promiscuous mode
[ 1711.879894][T30580] syzkaller0: entered allmulticast mode
[ 1711.944150][T30580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1711.971920][T30579] tipc: Resetting bearer <eth:syzkaller0>
[ 1712.152647][   T29] hid_parser_main: 91 callbacks suppressed
[ 1712.152667][   T29] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0
[ 1712.307889][T30579] tipc: Disabling bearer <eth:syzkaller0>
[ 1712.318548][   T29] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[ 1712.422698][   T29] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE
[ 1712.450326][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1712.487319][T30591] openvswitch: netlink: Invalid VLAN frame
[ 1712.769866][T30548] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 1712.843289][   T29] cp2112 0003:10C4:EA90.0025: error requesting SMBus config
[ 1712.863214][   T29] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -71
[ 1712.877596][   T29] usb 6-1: USB disconnect, device number 9
[ 1713.005893][T30600] lo speed is unknown, defaulting to 1000
[ 1713.154643][T30600] vxcan1 speed is unknown, defaulting to 1000
[ 1714.089630][   T30] audit: type=1326 audit(1721.769:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.115619][   T30] audit: type=1326 audit(1721.769:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.210381][   T30] audit: type=1326 audit(1721.769:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.282841][   T30] audit: type=1326 audit(1721.769:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.307882][   T30] audit: type=1326 audit(1721.769:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.331053][   T30] audit: type=1326 audit(1721.769:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.354262][   T30] audit: type=1326 audit(1721.769:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.382096][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1714.400348][   T30] audit: type=1326 audit(1721.769:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.464784][   T30] audit: type=1326 audit(1721.769:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.466005][T30621] overlayfs: missing 'workdir'
[ 1714.509284][   T30] audit: type=1326 audit(1721.769:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30607 comm="syz.0.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1714.532399][ T5889] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 1714.608229][T30610] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1714.710484][T26795] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1714.820268][T17495] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1714.998556][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1715.008167][ T5889] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1715.016061][  T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.024953][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.034724][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.042800][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1715.044303][ T5889] usb 2-1: can't read configurations, error -71
[ 1715.060807][T26795] usb 6-1: Using ep0 maxpacket: 32
[ 1715.067158][T26795] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[ 1715.076341][T26795] usb 6-1: config 0 has no interface number 0
[ 1715.085134][T26795] usb 6-1: New USB device found, idVendor=07d1, idProduct=3a07, bcdDevice=c7.20
[ 1715.094245][T26795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1715.103733][T26795] usb 6-1: Product: syz
[ 1715.108643][T26795] usb 6-1: Manufacturer: syz
[ 1715.113482][T26795] usb 6-1: SerialNumber: syz
[ 1715.121533][T26795] usb 6-1: config 0 descriptor??
[ 1715.128641][T26795] usb 6-1: Could not find all expected endpoints
[ 1715.144620][T17495] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1715.176282][T17495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.198520][T17495] usb 5-1: config 0 descriptor??
[ 1715.212766][T17495] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1715.327974][ T5929] usb 6-1: USB disconnect, device number 10
[ 1715.668589][T17495] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[ 1715.901055][T19915] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1716.096486][T17495] gspca_cpia1: usb_control_msg 02, error -71
[ 1716.172772][T17495] cpia1 5-1:0.0: only firmware version 1 is supported (got: 234)
[ 1716.249313][T17495] usb 5-1: USB disconnect, device number 16
[ 1716.395336][T19915] usb 4-1: Using ep0 maxpacket: 8
[ 1716.657731][T19915] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1716.667016][T19915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1716.675139][T19915] usb 4-1: Product: syz
[ 1716.679335][T19915] usb 4-1: Manufacturer: syz
[ 1716.684002][T19915] usb 4-1: SerialNumber: syz
[ 1716.697640][T19915] usb 4-1: config 0 descriptor??
[ 1716.711988][T19915] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1716.723154][T19915] usb 4-1: setting power ON
[ 1716.730813][T19915] dvb-usb: bulk message failed: -22 (2/0)
[ 1716.747397][T19915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1716.764029][T19915] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1716.772973][T19915] usb 4-1: media controller created
[ 1716.790414][T19915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1716.820294][T19915] usb 4-1: selecting invalid altsetting 6
[ 1716.826072][T19915] usb 4-1: digital interface selection failed (-22)
[ 1716.833171][T19915] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1716.844097][T19915] usb 4-1: setting power OFF
[ 1716.851658][T19915] dvb-usb: bulk message failed: -22 (2/0)
[ 1716.857444][T19915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1716.888352][T19915] (NULL device *): no alternate interface
[ 1716.920419][T30637] dvb-usb: bulk message failed: -22 (3/0)
[ 1716.969592][T30637] cxusb: i2c rd: len=1792 is too big!
[ 1716.969592][T30637] 
[ 1717.010256][T30659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30659 comm=syz.1.6644
[ 1718.054794][T30671] netlink: 'syz.0.6648': attribute type 2 has an invalid length.
[ 1718.097389][T19915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1718.099861][T30671] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6648'.
[ 1718.124740][T19915] usb 4-1: USB disconnect, device number 95
[ 1718.320067][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1718.694247][T30687] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f
[ 1719.500331][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.398504][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.406596][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1721.536658][T30710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30710 comm=syz.1.6659
[ 1722.539356][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1722.603496][T30730] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1722.630679][T17495] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[ 1722.730855][T30738] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f
[ 1722.891140][T17495] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[ 1722.961833][T17495] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[ 1723.015542][T17495] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64
[ 1723.072563][T17495] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1723.115715][T17495] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1723.153057][T17495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.491067][T30731] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1723.505815][T17495] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1723.527766][T17495] usb 5-1: invalid MIDI out EP 0
[ 1724.086199][T17495] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1724.447254][T30757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1724.466472][T30757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1724.717359][T19915] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[ 1724.890828][T19915] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1724.902090][T30763] zonefs (nullb0) ERROR: Not a zoned block device
[ 1724.931712][T19915] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1724.960932][T19915] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1724.989198][T19915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1725.036834][T19915] hub 4-1:4.0: USB hub found
[ 1725.132294][  T792] usb 5-1: USB disconnect, device number 17
[ 1725.169562][T17495] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1725.238637][T19915] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1725.301957][T19915] usb 4-1: USB disconnect, device number 96
[ 1725.331965][T17495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1725.346090][T17495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1725.367887][T17495] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1725.387166][T17495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1725.430681][T17495] usb 2-1: config 0 descriptor??
[ 1725.550734][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6673'.
[ 1725.649965][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1726.483681][T30784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6679'.
[ 1726.540146][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1726.549028][T30787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6679'.
[ 1726.699677][T26702] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[ 1726.850365][T30762] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 1726.860191][T17495] usbhid 2-1:0.0: can't add hid device: -71
[ 1726.868251][T17495] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1726.931297][T17495] usb 2-1: USB disconnect, device number 3
[ 1726.948941][T26702] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1726.997752][T26702] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1727.029984][T26702] usb 4-1: can't read configurations, error -71
[ 1727.169810][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1727.203369][T30800] overlayfs: missing 'lowerdir'
[ 1728.316542][T30810] netlink: 436 bytes leftover after parsing attributes in process `syz.1.6684'.
[ 1728.361041][T30810] netlink: 436 bytes leftover after parsing attributes in process `syz.1.6684'.
[ 1728.489562][T26702] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1728.659629][T26702] usb 5-1: Using ep0 maxpacket: 16
[ 1729.060688][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1729.069094][T19915] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1729.070639][T26702] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[ 1729.096815][T26702] usb 5-1: config 0 has no interface number 0
[ 1729.107034][T30824] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f
[ 1729.119618][T26702] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1729.164988][T26702] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1729.179494][T26702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1729.187485][T26702] usb 5-1: Product: syz
[ 1729.197613][T26702] usb 5-1: Manufacturer: syz
[ 1729.207830][T26702] usb 5-1: SerialNumber: syz
[ 1729.224644][T26702] usb 5-1: config 0 descriptor??
[ 1729.239611][T19915] usb 6-1: Using ep0 maxpacket: 16
[ 1729.252177][T19915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1729.280377][T19915] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1729.295784][T19915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1729.309662][T19915] usb 6-1: Product: syz
[ 1729.313882][T19915] usb 6-1: Manufacturer: syz
[ 1729.320057][T19915] usb 6-1: SerialNumber: syz
[ 1729.332392][T19915] usb 6-1: config 0 descriptor??
[ 1729.339536][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1729.357458][T19915] mcba_usb 6-1:0.0: Can't find endpoints
[ 1729.502988][ T5889] usb 2-1: Using ep0 maxpacket: 16
[ 1729.510769][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1729.531172][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1729.542535][ T5889] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1729.571011][T30818] random: crng reseeded on system resumption
[ 1729.662016][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1729.670364][ T5889] usb 2-1: Product: syz
[ 1729.674523][ T5889] usb 2-1: Manufacturer: syz
[ 1729.679107][ T5889] usb 2-1: SerialNumber: syz
[ 1729.689922][ T5889] usb 2-1: config 0 descriptor??
[ 1729.743466][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1729.984526][T30833] vlan0: entered promiscuous mode
[ 1730.010926][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1730.010955][   T30] audit: type=1400 audit(1737.949:3742): avc:  denied  { ioctl } for  pid=30826 comm="syz.3.6692" path="socket:[104078]" dev="sockfs" ino=104078 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1730.063498][T30833] vlan0: entered allmulticast mode
[ 1730.068938][T30833] veth0_vlan: entered allmulticast mode
[ 1730.080095][T30833] team0: Port device vlan0 added
[ 1730.137559][T26702] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1730.150877][T30829] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1730.193225][ T5889] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input102
[ 1730.592529][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6693'.
[ 1730.608431][T26702] usb 5-1: USB disconnect, device number 18
[ 1730.699598][ T5889] rc_core: IR keymap rc-imon-pad not found
[ 1730.715588][ T5889] Registered IR keymap rc-empty
[ 1730.739002][ T5889] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1730.902380][ T5889] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1730.902991][T30847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6697'.
[ 1731.101332][ T5889] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1731.121697][ T5889] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input103
[ 1731.145687][ T5889] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:4> initialized
[ 1731.176212][T30854] zonefs (nullb0) ERROR: Not a zoned block device
[ 1731.198817][ T5929] usb 6-1: USB disconnect, device number 11
[ 1731.413753][T30847] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1731.545319][T26702] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1731.885424][T30864] lo speed is unknown, defaulting to 1000
[ 1731.909990][T26702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1732.054096][T26702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1732.189619][T30864] vxcan1 speed is unknown, defaulting to 1000
[ 1732.216397][T26702] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1732.262194][T26702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1732.289835][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1732.301997][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1732.349288][T30873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6702'.
[ 1732.651130][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1732.651969][ T5929] usb 2-1: USB disconnect, device number 4
[ 1732.666865][T26702] usb 5-1: config 0 descriptor??
[ 1732.749025][T30878] ipvlan0: entered promiscuous mode
[ 1732.756207][T30878] ipvlan0: entered allmulticast mode
[ 1732.765553][T30878] veth0_vlan: entered allmulticast mode
[ 1732.770042][T26511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1732.782580][T30876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1732.798361][T30876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1732.838367][T30879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6704'.
[ 1732.855829][T30879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6704'.
[ 1732.922289][T30883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6707'.
[ 1732.933758][T30883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6707'.
[ 1733.097510][T26702] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0
[ 1733.122214][T26702] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1733.169541][T30851] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 1733.279536][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1733.311055][T26702] cp2112 0003:10C4:EA90.0026: error requesting version
[ 1733.335889][T26702] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -71
[ 1733.360733][T26702] usb 5-1: USB disconnect, device number 19
[ 1733.405119][T30897] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6711'.
[ 1733.450742][ T5929] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1733.460165][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1733.469206][T30897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1733.479236][ T5929] usb 1-1: config 0 descriptor??
[ 1733.487161][ T5929] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1733.511532][T30897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1733.533668][T30897] bond0 (unregistering): Released all slaves
[ 1733.785202][T30907] netlink: 'syz.1.6713': attribute type 12 has an invalid length.
[ 1733.797448][T30907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6713'.
[ 1733.948929][ T5929] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[ 1734.536905][ T5929] gspca_cpia1: usb_control_msg 02, error -71
[ 1734.555200][ T5929] cpia1 1-1:0.0: only firmware version 1 is supported (got: 234)
[ 1734.575100][ T5929] usb 1-1: USB disconnect, device number 8
[ 1734.938984][T30923] netlink: 'syz.5.6717': attribute type 25 has an invalid length.
[ 1735.025511][T30923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6717'.
[ 1735.319592][T19915] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1735.471785][T30938] zonefs (nullb0) ERROR: Not a zoned block device
[ 1735.515596][T19915] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[ 1735.534840][T19915] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1735.557781][T19915] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1735.586130][T19915] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1735.601160][T19915] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1735.612453][T19915] usb 5-1: Product: syz
[ 1735.616883][T19915] usb 5-1: Manufacturer: syz
[ 1735.627486][T19915] usb 5-1: SerialNumber: syz
[ 1735.650727][T19915] usb 5-1: config 0 descriptor??
[ 1735.663668][T30940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6724'.
[ 1735.679272][T19915] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1735.814895][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1735.943040][T19915] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1735.996582][T19915] usb 5-1: selecting invalid altsetting 0
[ 1736.090468][T19915] usb 5-1: USB disconnect, device number 20
[ 1736.180284][T29177] udevd[29177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1736.218973][T30934] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 1736.498827][ T5889] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1736.679598][T19915] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1737.541122][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1737.569508][ T5889] usb 2-1: Using ep0 maxpacket: 16
[ 1737.588275][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1737.800563][T11346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1737.809240][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1737.822416][ T5889] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1737.832031][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1737.841064][ T5889] usb 2-1: Product: syz
[ 1737.845281][   T30] audit: type=1400 audit(1745.819:3743): avc:  denied  { bind } for  pid=30966 comm="syz.3.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1737.864858][ T5889] usb 2-1: Manufacturer: syz
[ 1737.870763][ T5889] usb 2-1: SerialNumber: syz
[ 1737.876660][ T5889] usb 2-1: config 0 descriptor??
[ 1737.892308][ T5889] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1737.935043][T19915] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[ 1737.949549][T19915] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1737.959848][ T5889] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1737.974756][T19915] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1737.989129][T19915] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1737.998350][T19915] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1738.082235][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1738.099893][T18757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1738.145909][T19915] usb 5-1: Product: syz
[ 1738.168083][T19915] usb 5-1: Manufacturer: syz
[ 1738.631666][T19915] usb 5-1: SerialNumber: syz
[ 1738.639384][T19915] usb 5-1: config 0 descriptor??
[ 1738.645179][T19915] usb 5-1: can't set config #0, error -71
[ 1738.653025][T19915] usb 5-1: USB disconnect, device number 21
[ 1738.690173][ T5889] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1738.698883][ T5889] em28xx 2-1:0.0: Config register raw data: 0x41
[ 1738.853113][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1738.936283][T30953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6729'.
[ 1738.960940][T17495] usb 2-1: USB disconnect, device number 5
[ 1738.982700][T17495] em28xx 2-1:0.0: Disconnecting em28xx
[ 1738.997244][T17495] em28xx 2-1:0.0: Freeing device
[ 1739.100633][T30982] lo speed is unknown, defaulting to 1000
[ 1739.149519][T30982] vxcan1 speed is unknown, defaulting to 1000
[ 1739.179785][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1739.349871][ T5929] usb 1-1: Using ep0 maxpacket: 16
[ 1739.377456][ T5929] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[ 1739.385985][ T5929] usb 1-1: config 0 has no interface number 0
[ 1739.399588][ T5929] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1739.413304][ T5929] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1739.423796][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.437762][ T5929] usb 1-1: Product: syz
[ 1739.442104][ T5929] usb 1-1: Manufacturer: syz
[ 1739.447883][ T5929] usb 1-1: SerialNumber: syz
[ 1739.452643][T17495] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1739.477279][ T5929] usb 1-1: config 0 descriptor??
[ 1739.539672][T19915] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1739.641394][T17495] usb 4-1: Using ep0 maxpacket: 16
[ 1739.670710][T17495] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[ 1739.680724][T17495] usb 4-1: config 0 has no interface number 0
[ 1739.813448][T26702] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1739.883557][T17495] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1739.898978][T17495] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1739.908880][T17495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.917129][T17495] usb 4-1: Product: syz
[ 1739.923955][T19915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1739.939763][T17495] usb 4-1: Manufacturer: syz
[ 1739.941820][T19915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1739.959594][T17495] usb 4-1: SerialNumber: syz
[ 1739.984801][T19915] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1739.990157][T17495] usb 4-1: config 0 descriptor??
[ 1740.014969][T19915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1740.040439][T19915] usb 5-1: config 0 descriptor??
[ 1740.056045][T26702] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1740.069210][T26702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1740.091954][T26702] usb 6-1: config 0 descriptor??
[ 1740.101471][T26702] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1740.298968][ T5929] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1740.312424][ T5929] usb 1-1: USB disconnect, device number 9
[ 1740.444483][T31000] rdma_rxe: rxe_newlink: failed to add sit0
[ 1740.465207][   T30] audit: type=1400 audit(1748.409:3744): avc:  denied  { setopt } for  pid=30997 comm="syz.1.6743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1740.485351][   T30] audit: type=1326 audit(1748.429:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30997 comm="syz.1.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1740.509975][   T30] audit: type=1326 audit(1748.429:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30997 comm="syz.1.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1740.534257][   T30] audit: type=1326 audit(1748.429:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30997 comm="syz.1.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1740.567986][   T30] audit: type=1326 audit(1748.429:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30997 comm="syz.1.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1740.605226][   T30] audit: type=1326 audit(1748.429:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30997 comm="syz.1.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1740.638050][T26702] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[ 1740.645414][   T30] audit: type=1326 audit(1748.439:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30997 comm="syz.1.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bb99c629 code=0x7ffc0000
[ 1740.790009][T17495] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1740.806376][T17495] usb 4-1: USB disconnect, device number 99
[ 1740.947298][T31002] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1741.153846][T26702] gspca_cpia1: usb_control_msg 02, error -71
[ 1741.160437][T26702] cpia1 6-1:0.0: only firmware version 1 is supported (got: 234)
[ 1741.174559][T26702] usb 6-1: USB disconnect, device number 12
[ 1741.252155][T30987] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 1741.312300][T19915] usbhid 5-1:0.0: can't add hid device: -71
[ 1741.344990][T19915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1741.493768][T19915] usb 5-1: USB disconnect, device number 22
[ 1741.890360][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1741.975462][T31019] netlink: 'syz.3.6749': attribute type 1 has an invalid length.
[ 1742.076973][T31019] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1742.570135][T31021] gretap0: entered promiscuous mode
[ 1743.509605][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1743.836538][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1743.858315][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1743.911602][T31041] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f
[ 1744.257839][T31046] netlink: 2100 bytes leftover after parsing attributes in process `syz.0.6757'.
[ 1744.929727][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1745.334018][T31055] 9p: Could not find request transport: 

[ 1745.624041][T31062] syzkaller1: entered promiscuous mode
[ 1745.636208][T31062] syzkaller1: entered allmulticast mode
[ 1745.989535][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1746.150967][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1747.202929][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1747.212993][ T5889] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1747.222285][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1747.239430][ T5889] usb 1-1: config 0 descriptor??
[ 1747.349741][T31083] syzkaller0: entered promiscuous mode
[ 1747.355280][T31083] syzkaller0: entered allmulticast mode
[ 1747.552982][T31094] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.6774'.
[ 1747.650442][T31063] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 1747.676044][ T5889] usbhid 1-1:0.0: can't add hid device: -71
[ 1747.689570][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1747.712882][ T5889] usb 1-1: USB disconnect, device number 10
[ 1747.723202][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6776'.
[ 1747.862869][T31100] ufs: You didn't specify the type of your ufs filesystem
[ 1747.862869][T31100] 
[ 1747.862869][T31100] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1747.862869][T31100] 
[ 1747.862869][T31100] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1747.894352][T31100] ufs: ufstype=old is supported read-only
[ 1747.901453][T31100] ufs: ufs_fill_super(): bad magic number
[ 1748.209603][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.871690][T31112] lo speed is unknown, defaulting to 1000
[ 1748.913887][T31112] vxcan1 speed is unknown, defaulting to 1000
[ 1748.981966][T31116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6780'.
[ 1748.994362][   T30] audit: type=1800 audit(1756.969:3751): pid=31102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6776" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1749.052657][T31119] syzkaller0: entered promiscuous mode
[ 1749.062661][T31119] syzkaller0: entered allmulticast mode
[ 1749.582619][T21746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.590730][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1749.622387][T31130] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1749.701372][T31133] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1749.920246][ T5889] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1750.118371][ T5889] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1750.160122][T31149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31149 comm=syz.4.6789
[ 1750.169490][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1750.695920][ T5889] usb 4-1: config 0 descriptor??
[ 1750.728187][ T5889] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1751.136457][T31161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6793'.
[ 1751.179615][ T5889] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[ 1751.220869][T31121] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6782'.
[ 1751.249851][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1751.290780][T31161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6793'.
[ 1751.570123][T31175] FAULT_INJECTION: forcing a failure.
[ 1751.570123][T31175] name failslab, interval 1, probability 0, space 0, times 0
[ 1751.601578][ T5889] gspca_cpia1: usb_control_msg 02, error -71
[ 1751.607596][ T5889] cpia1 4-1:0.0: only firmware version 1 is supported (got: 234)
[ 1751.634476][T31175] CPU: 1 UID: 0 PID: 31175 Comm: syz.4.6797 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1751.634502][T31175] Tainted: [L]=SOFTLOCKUP
[ 1751.634508][T31175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1751.634518][T31175] Call Trace:
[ 1751.634523][T31175]  <TASK>
[ 1751.634530][T31175]  dump_stack_lvl+0x100/0x190
[ 1751.634561][T31175]  should_fail_ex.cold+0x5/0xa
[ 1751.634582][T31175]  should_failslab+0xc2/0x120
[ 1751.634608][T31175]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[ 1751.634632][T31175]  ? ovl_lookup_layers+0x465/0x2ac0
[ 1751.634656][T31175]  kstrdup+0x51/0xe0
[ 1751.634679][T31175]  ovl_lookup_layers+0x465/0x2ac0
[ 1751.634703][T31175]  ? __lock_acquire+0x4a5/0x2630
[ 1751.634730][T31175]  ? __lock_acquire+0x4a5/0x2630
[ 1751.634759][T31175]  ? memcg_list_lru_alloc+0x116/0x740
[ 1751.634780][T31175]  ? __pfx_ovl_lookup_layers+0x10/0x10
[ 1751.634800][T31175]  ? lock_acquire+0x1cf/0x380
[ 1751.634836][T31175]  ovl_lookup+0x4a8/0x6b0
[ 1751.634854][T31175]  ? __memcg_slab_post_alloc_hook+0x51e/0x9a0
[ 1751.634884][T31175]  ? __pfx_ovl_lookup+0x10/0x10
[ 1751.634901][T31175]  ? rcu_is_watching+0x12/0xc0
[ 1751.634925][T31175]  ? do_raw_spin_lock+0x128/0x260
[ 1751.634949][T31175]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1751.634967][T31175]  ? _raw_spin_unlock+0x28/0x50
[ 1751.634995][T31175]  lookup_one_qstr_excl+0x1d1/0x250
[ 1751.635014][T31175]  ? mnt_want_write+0x161/0x450
[ 1751.635039][T31175]  filename_create+0x1cf/0x400
[ 1751.635061][T31175]  ? __pfx_filename_create+0x10/0x10
[ 1751.635088][T31175]  ? find_held_lock+0x2b/0x80
[ 1751.635111][T31175]  filename_mkdirat+0xb9/0x5e0
[ 1751.635130][T31175]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1751.635147][T31175]  ? strncpy_from_user+0x19d/0x2d0
[ 1751.635171][T31175]  ? do_getname+0x191/0x390
[ 1751.635193][T31175]  __x64_sys_mkdirat+0x89/0xc0
[ 1751.635210][T31175]  do_syscall_64+0x106/0xf80
[ 1751.635225][T31175]  ? clear_bhb_loop+0x40/0x90
[ 1751.635245][T31175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1751.635261][T31175] RIP: 0033:0x7fc9ba39c629
[ 1751.635276][T31175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1751.635291][T31175] RSP: 002b:00007fc9bb31d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1751.635308][T31175] RAX: ffffffffffffffda RBX: 00007fc9ba615fa0 RCX: 00007fc9ba39c629
[ 1751.635318][T31175] RDX: 0000000000000195 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1751.635328][T31175] RBP: 00007fc9bb31d090 R08: 0000000000000000 R09: 0000000000000000
[ 1751.635338][T31175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1751.635347][T31175] R13: 00007fc9ba616038 R14: 00007fc9ba615fa0 R15: 00007ffdcaa0cba8
[ 1751.635370][T31175]  </TASK>
[ 1751.641259][ T5889] usb 4-1: USB disconnect, device number 100
[ 1751.898115][T31180] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6798'.
[ 1752.056693][T31184] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 1752.133928][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.168660][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.189565][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.196950][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.219501][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.226885][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.234460][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.249192][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.269597][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.278220][ T5889] hid-generic 0000:0000:0004.0027: unknown main item tag 0x0
[ 1752.375015][ T5889] hid-generic 0000:0000:0004.0027: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[ 1752.460983][T31193] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1752.535524][T31197] netlink: 'syz.3.6804': attribute type 10 has an invalid length.
[ 1752.550750][T31192] fido_id[31192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1752.574006][T31199] Device name not specified.
[ 1752.574006][T31199] 
[ 1752.587872][T31197] team0: Device veth0_vlan is already a lower device of the team interface
[ 1753.482251][   T30] audit: type=1400 audit(1761.459:3752): avc:  denied  { mount } for  pid=31202 comm="syz.4.6806" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1754.293672][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.318397][   T30] audit: type=1400 audit(1762.289:3753): avc:  denied  { unmount } for  pid=28680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1754.654014][T31240] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6818'.
[ 1755.024904][T31254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6822'.
[ 1755.196916][T31258] netlink: 'syz.3.6824': attribute type 11 has an invalid length.
[ 1755.289575][T17495] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1755.332260][T21746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.340763][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1755.457895][T31262] syzkaller0: entered promiscuous mode
[ 1755.464065][T31262] syzkaller0: entered allmulticast mode
[ 1755.471114][T17495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1755.485626][T17495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1755.485675][T31262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1755.514398][T17495] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1755.554872][T17495] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[ 1755.560209][T31261] tipc: Resetting bearer <eth:syzkaller0>
[ 1755.569015][T17495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1755.619831][T31261] tipc: Disabling bearer <eth:syzkaller0>
[ 1755.626220][T17495] usb 5-1: config 0 descriptor??
[ 1755.989165][T31268] syzkaller0: entered promiscuous mode
[ 1755.997751][T31268] syzkaller0: entered allmulticast mode
[ 1756.452482][T17495] usbhid 5-1:0.0: can't add hid device: -71
[ 1756.460004][T17495] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1756.473852][T17495] usb 5-1: USB disconnect, device number 23
[ 1756.584791][T31283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1756.600110][T31283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.672729][T31284] netlink: 'syz.1.6832': attribute type 3 has an invalid length.
[ 1756.697792][T31284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6832'.
[ 1756.767934][ T5929] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1756.929558][ T5929] usb 1-1: Invalid ep0 maxpacket: 9
[ 1757.068088][ T5929] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1757.223433][ T5929] usb 1-1: Invalid ep0 maxpacket: 9
[ 1757.254804][ T5929] usb usb1-port1: attempt power cycle
[ 1757.333602][T26702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1757.689632][ T5929] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1757.712261][ T5929] usb 1-1: Invalid ep0 maxpacket: 9
[ 1757.770021][T31304] binder: 31299:31304 ioctl c0306201 200000000040 returned -14
[ 1757.939936][ T5929] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1757.993879][ T5929] usb 1-1: Invalid ep0 maxpacket: 9
[ 1758.004845][ T5929] usb usb1-port1: unable to enumerate USB device
[ 1758.049788][T31309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6838'.
[ 1758.347184][   T30] audit: type=1400 audit(1766.309:3754): avc:  denied  { lock } for  pid=31313 comm="syz.5.6841" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1758.481901][T31318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6840'.
[ 1758.799651][  T792] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1759.045070][  T792] usb 6-1: Using ep0 maxpacket: 16
[ 1759.093987][  T792] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[ 1759.107688][  T792] usb 6-1: config 0 has no interface number 0
[ 1759.116771][  T792] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1759.146865][  T792] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1759.158147][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1759.169727][  T792] usb 6-1: Product: syz
[ 1759.173876][  T792] usb 6-1: Manufacturer: syz
[ 1759.178495][  T792] usb 6-1: SerialNumber: syz
[ 1759.217395][  T792] usb 6-1: config 0 descriptor??
[ 1759.310692][T31331] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1759.319019][T31332] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1759.330581][T31331] batman_adv: batadv0: Adding interface: dummy0
[ 1759.336853][T31331] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1759.363951][T31331] batman_adv: batadv0: Interface activated: dummy0
[ 1759.380153][T31331] batadv0: mtu less than device minimum
[ 1759.386840][T31331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1759.398367][T31331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1759.409692][T31331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1759.420477][T31331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1759.431717][T31331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1759.473917][  T792] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71
[ 1759.481042][  T792] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1759.493358][  T792] usb 6-1: USB disconnect, device number 13
[ 1760.477448][ T5929] net_ratelimit: 15 callbacks suppressed
[ 1760.477465][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.089977][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.098084][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.145485][T31356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.201990][T31356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.257181][T31356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.303810][T31361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31361 comm=syz.5.6856
[ 1761.321420][T31359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.512194][T31355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1761.678755][T31355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1763.580989][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1764.017643][T31389] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1764.032948][T31389] FAULT_INJECTION: forcing a failure.
[ 1764.032948][T31389] name failslab, interval 1, probability 0, space 0, times 0
[ 1764.045618][T31389] CPU: 1 UID: 0 PID: 31389 Comm: syz.0.6863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1764.045644][T31389] Tainted: [L]=SOFTLOCKUP
[ 1764.045650][T31389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1764.045660][T31389] Call Trace:
[ 1764.045666][T31389]  <TASK>
[ 1764.045672][T31389]  dump_stack_lvl+0x100/0x190
[ 1764.045702][T31389]  should_fail_ex.cold+0x5/0xa
[ 1764.045725][T31389]  should_failslab+0xc2/0x120
[ 1764.045751][T31389]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1764.045773][T31389]  ? audit_log_start+0x29d/0x930
[ 1764.045797][T31389]  audit_log_start+0x29d/0x930
[ 1764.045819][T31389]  ? __pfx_audit_log_start+0x10/0x10
[ 1764.045838][T31389]  ? finish_task_switch.isra.0+0x205/0xb80
[ 1764.045861][T31389]  ? lockdep_hardirqs_on+0x78/0x100
[ 1764.045879][T31389]  ? finish_task_switch.isra.0+0x205/0xb80
[ 1764.045903][T31389]  ? rcu_is_watching+0x12/0xc0
[ 1764.045923][T31389]  ? trace_sched_exit_tp+0x13a/0x180
[ 1764.045951][T31389]  audit_seccomp+0x61/0x1f0
[ 1764.045977][T31389]  __seccomp_filter+0x896/0x1140
[ 1764.045999][T31389]  ? __pfx___seccomp_filter+0x10/0x10
[ 1764.046023][T31389]  ? exit_to_user_mode_loop+0xdd/0x4a0
[ 1764.046053][T31389]  __secure_computing+0x221/0x2e0
[ 1764.046073][T31389]  do_syscall_64+0x568/0xf80
[ 1764.046090][T31389]  ? clear_bhb_loop+0x40/0x90
[ 1764.046112][T31389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1764.046130][T31389] RIP: 0033:0x7ff25219c629
[ 1764.046145][T31389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1764.046161][T31389] RSP: 002b:00007ff252f75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1764.046177][T31389] RAX: ffffffffffffffda RBX: 00007ff252416180 RCX: 00007ff25219c629
[ 1764.046189][T31389] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c
[ 1764.046199][T31389] RBP: 00007ff252f75090 R08: 0000000000000000 R09: 0000000000000000
[ 1764.046209][T31389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1764.046220][T31389] R13: 00007ff252416218 R14: 00007ff252416180 R15: 00007ffe5b2b5548
[ 1764.046243][T31389]  </TASK>
[ 1764.046266][T31389] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 1764.066379][   T30] audit: type=1326 audit(1771.999:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1764.072751][T31389] audit: out of memory in audit_log_start
[ 1764.079855][   T30] audit: type=1326 audit(1771.999:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1764.321345][T31390] syz2: rxe_newlink: already configured on vxcan1
[ 1764.477016][T31396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31396 comm=syz.4.6867
[ 1764.569889][   T30] audit: type=1326 audit(1771.999:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1764.624810][   T30] audit: type=1326 audit(1771.999:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1764.944858][   T30] audit: type=1326 audit(1771.999:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1764.968669][   T30] audit: type=1326 audit(1772.009:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1765.176838][   T30] audit: type=1326 audit(1772.009:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25219c629 code=0x7ffc0000
[ 1765.329112][   T30] audit: type=1326 audit(1772.009:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="syz.0.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25215cece code=0x7ffc0000
[ 1765.423937][T31409] netlink: 'syz.0.6870': attribute type 1 has an invalid length.
[ 1765.509730][T31407] overlayfs: missing 'workdir'
[ 1765.717374][T31415] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1766.128465][T31418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6872'.
[ 1766.154816][T31410] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1766.165796][T31410] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1766.228740][T31418] unsupported nlmsg_type 40
[ 1766.243113][T31416] bond2: (slave bridge2): Enslaving as an active interface with a down link
[ 1766.312876][T31409] macvlan2: entered promiscuous mode
[ 1766.322914][T31409] macvlan2: entered allmulticast mode
[ 1766.339626][T31409] bond2: entered promiscuous mode
[ 1766.464738][T31409] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1766.490074][T31409] bond2: left promiscuous mode
[ 1766.631841][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1766.718968][T11346] kernel write not supported for file bpf-prog (pid: 11346 comm: kworker/0:3)
[ 1766.919731][T12335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1766.938842][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1768.136710][T31441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6879'.
[ 1768.172006][T31441] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6879'.
[ 1768.182404][T31441] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1768.487367][T31457] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[ 1768.762888][T31460] IPVS: wrr: FWM 3 0x00000003 - no destination available
[ 1768.981725][T31457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1769.205266][T26038] Bluetooth: hci3: ACL packet for unknown connection handle 200
[ 1769.579794][  T792] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 1769.622422][T31471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6886'.
[ 1769.649777][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1769.740907][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[ 1769.775266][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1769.799114][  T792] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1769.835235][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1769.871641][  T792] usb 1-1: Product: syz
[ 1770.002193][  T792] usb 1-1: Manufacturer: syz
[ 1770.009561][  T792] usb 1-1: SerialNumber: syz
[ 1770.026117][  T792] usb 1-1: config 0 descriptor??
[ 1770.040546][T31481] netlink: 'syz.4.6889': attribute type 16 has an invalid length.
[ 1770.048969][   T30] kauditd_printk_skb: 41 callbacks suppressed
[ 1770.048983][   T30] audit: type=1400 audit(1778.009:3804): avc:  denied  { setopt } for  pid=31476 comm="syz.4.6889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1770.311753][T31469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1770.321548][  T792] port100 1-1:0.0: NFC: Could not get supported command types
[ 1770.568700][T26702] usb 1-1: USB disconnect, device number 15
[ 1770.731519][T31491] hub 2-0:1.0: USB hub found
[ 1770.736779][T31491] hub 2-0:1.0: 1 port detected
[ 1771.781133][T31500] hub 2-0:1.0: USB hub found
[ 1771.786400][T31500] hub 2-0:1.0: 1 port detected
[ 1772.628077][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.641051][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.690086][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1772.845648][T31513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6899'.
[ 1772.855468][T31513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6899'.
[ 1774.681195][T31532] netlink: 'syz.1.6902': attribute type 4 has an invalid length.
[ 1775.089770][   T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1775.292282][T31543] netlink: 436 bytes leftover after parsing attributes in process `syz.3.6906'.
[ 1775.303518][T31543] netlink: 436 bytes leftover after parsing attributes in process `syz.3.6906'.
[ 1775.338256][   T29] usb 6-1: Using ep0 maxpacket: 16
[ 1775.732945][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1775.759717][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1775.798711][   T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1775.827890][   T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1775.919100][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1775.938618][   T29] usb 6-1: Product: syz
[ 1775.943037][   T29] usb 6-1: Manufacturer: syz
[ 1775.947816][   T29] usb 6-1: SerialNumber: syz
[ 1775.979751][   T29] usb 6-1: config 0 descriptor??
[ 1776.013120][   T29] mcba_usb 6-1:0.0 can0: couldn't setup read URBs
[ 1776.022235][   T29] mcba_usb 6-1:0.0 can0: couldn't start device: -90
[ 1776.071002][   T29] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90
[ 1776.218706][   T29] usb 6-1: USB disconnect, device number 14
[ 1776.226228][T31554] random: crng reseeded on system resumption
[ 1776.494405][T31562] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1776.521452][   T30] audit: type=1326 audit(1784.479:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1776.836222][T31563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31563 comm=syz.1.6910
[ 1776.951305][   T30] audit: type=1326 audit(1784.479:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.249693][   T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1777.264238][   T30] audit: type=1326 audit(1784.479:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.542504][   T29] usb 5-1: Using ep0 maxpacket: 32
[ 1777.589550][   T29] usb 5-1: config 0 has no interfaces?
[ 1777.598529][   T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1777.619521][   T30] audit: type=1326 audit(1784.479:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.619855][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.739586][   T30] audit: type=1326 audit(1784.479:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.784788][   T30] audit: type=1326 audit(1784.479:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.819146][   T30] audit: type=1326 audit(1784.479:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.844201][   T29] usb 5-1: config 0 descriptor??
[ 1777.845086][T31575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6913'.
[ 1777.866876][   T30] audit: type=1326 audit(1784.479:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.909142][   T30] audit: type=1326 audit(1784.489:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1777.933391][   T30] audit: type=1326 audit(1784.489:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31558 comm="syz.5.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f126239c629 code=0x7ffc0000
[ 1778.002504][T31579] geneve2: entered promiscuous mode
[ 1778.007801][T31579] geneve2: entered allmulticast mode
[ 1778.369999][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1778.378100][T27979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1779.003994][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1779.643660][T31607] ipvlan0: entered promiscuous mode
[ 1779.648988][T31607] ipvlan0: entered allmulticast mode
[ 1779.707033][T31609] netlink: 'syz.5.6924': attribute type 10 has an invalid length.
[ 1779.751581][T31609] syz_tun: entered promiscuous mode
[ 1779.774343][T31609] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1779.863038][T31614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31614 comm=syz.3.6925
[ 1780.166702][T19915] usb 5-1: USB disconnect, device number 24
[ 1780.542135][T31627] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f
[ 1781.229523][  T792] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1781.242702][T31641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6934'.
[ 1781.367597][T31645] ==================================================================
[ 1781.375676][T31645] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0
[ 1781.383055][T31645] Write of size 4 at addr ffff88802d871308 by task syz.5.6936/31645
[ 1781.391028][T31645] 
[ 1781.393347][T31645] CPU: 1 UID: 0 PID: 31645 Comm: syz.5.6936 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1781.393376][T31645] Tainted: [L]=SOFTLOCKUP
[ 1781.393384][T31645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1781.393396][T31645] Call Trace:
[ 1781.393402][T31645]  <TASK>
[ 1781.393409][T31645]  dump_stack_lvl+0x100/0x190
[ 1781.393441][T31645]  print_report+0x156/0x4c9
[ 1781.393466][T31645]  ? __virt_addr_valid+0x81/0x620
[ 1781.393492][T31645]  ? __phys_addr+0xe8/0x180
[ 1781.393518][T31645]  ? try_module_get+0x4c/0xd0
[ 1781.393538][T31645]  kasan_report+0xdf/0x1e0
[ 1781.393572][T31645]  ? try_module_get+0x4c/0xd0
[ 1781.393596][T31645]  kasan_check_range+0x10f/0x1e0
[ 1781.393617][T31645]  try_module_get+0x4c/0xd0
[ 1781.393640][T31645]  dvb_device_open+0x124/0x3b0
[ 1781.393668][T31645]  ? __pfx_dvb_device_open+0x10/0x10
[ 1781.393690][T31645]  chrdev_open+0x234/0x6a0
[ 1781.393708][T31645]  ? __pfx_chrdev_open+0x10/0x10
[ 1781.393728][T31645]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1781.393753][T31645]  do_dentry_open+0x6d8/0x1660
[ 1781.393781][T31645]  ? __pfx_chrdev_open+0x10/0x10
[ 1781.393801][T31645]  vfs_open+0x82/0x3f0
[ 1781.393822][T31645]  path_openat+0x208c/0x31a0
[ 1781.393844][T31645]  ? __pfx_path_openat+0x10/0x10
[ 1781.393865][T31645]  do_file_open+0x20e/0x430
[ 1781.393883][T31645]  ? __pfx_do_file_open+0x10/0x10
[ 1781.393907][T31645]  ? alloc_fd+0x476/0x790
[ 1781.393925][T31645]  ? do_getname+0x191/0x390
[ 1781.393948][T31645]  do_sys_openat2+0x10d/0x1e0
[ 1781.393967][T31645]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1781.393992][T31645]  __x64_sys_openat+0x12d/0x210
[ 1781.394012][T31645]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1781.394035][T31645]  ? do_user_addr_fault+0x8d6/0x12f0
[ 1781.394057][T31645]  do_syscall_64+0x106/0xf80
[ 1781.394075][T31645]  ? clear_bhb_loop+0x40/0x90
[ 1781.394096][T31645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1781.394115][T31645] RIP: 0033:0x7f126235cece
[ 1781.394132][T31645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1781.394150][T31645] RSP: 002b:00007f126329ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1781.394168][T31645] RAX: ffffffffffffffda RBX: 00007f126329b6c0 RCX: 00007f126235cece
[ 1781.394180][T31645] RDX: 0000000000000002 RSI: 00007f126329ac00 RDI: ffffffffffffff9c
[ 1781.394191][T31645] RBP: 00007f126329ac00 R08: 0000000000000000 R09: 0000000000000000
[ 1781.394203][T31645] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1781.394215][T31645] R13: 00007f1262616038 R14: 00007f1262615fa0 R15: 00007fffeb170a88
[ 1781.394232][T31645]  </TASK>
[ 1781.394239][T31645] 
[ 1781.651523][T31645] Allocated by task 1:
[ 1781.655568][T31645]  kasan_save_stack+0x30/0x50
[ 1781.660231][T31645]  kasan_save_track+0x14/0x30
[ 1781.664889][T31645]  __kasan_kmalloc+0xaa/0xb0
[ 1781.669468][T31645]  bus_add_driver+0x92/0x5b0
[ 1781.674043][T31645]  driver_register+0x1e2/0x360
[ 1781.678784][T31645]  vidtv_bridge_init+0x38/0x70
[ 1781.683532][T31645]  do_one_initcall+0x11d/0x760
[ 1781.688273][T31645]  kernel_init_freeable+0x6e5/0x7a0
[ 1781.693450][T31645]  kernel_init+0x1f/0x1e0
[ 1781.697758][T31645]  ret_from_fork+0x754/0xd80
[ 1781.702324][T31645]  ret_from_fork_asm+0x1a/0x30
[ 1781.707066][T31645] 
[ 1781.709365][T31645] The buggy address belongs to the object at ffff88802d871200
[ 1781.709365][T31645]  which belongs to the cache kmalloc-256 of size 256
[ 1781.723388][T31645] The buggy address is located 56 bytes to the right of
[ 1781.723388][T31645]  allocated 208-byte region [ffff88802d871200, ffff88802d8712d0)
[ 1781.737940][T31645] 
[ 1781.740238][T31645] The buggy address belongs to the physical page:
[ 1781.746620][T31645] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d871000 pfn:0x2d870
[ 1781.756663][T31645] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1781.765134][T31645] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1781.773610][T31645] page_type: f5(slab)
[ 1781.777566][T31645] raw: 00fff00000000240 ffff88813fe3ab40 ffffea0000cbaa90 ffffea0000f16690
[ 1781.786126][T31645] raw: ffff88802d871000 000000000010000c 00000000f5000000 0000000000000000
[ 1781.794683][T31645] head: 00fff00000000240 ffff88813fe3ab40 ffffea0000cbaa90 ffffea0000f16690
[ 1781.803330][T31645] head: ffff88802d871000 000000000010000c 00000000f5000000 0000000000000000
[ 1781.811973][T31645] head: 00fff00000000001 ffffea0000b61c01 00000000ffffffff 00000000ffffffff
[ 1781.820621][T31645] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1781.829267][T31645] page dumped because: kasan: bad access detected
[ 1781.835651][T31645] page_owner tracks the page as allocated
[ 1781.841338][T31645] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8558236640, free_ts 0
[ 1781.860932][T31645]  post_alloc_hook+0x153/0x170
[ 1781.865678][T31645]  get_page_from_freelist+0x111d/0x3140
[ 1781.871201][T31645]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1781.877075][T31645]  new_slab+0xa6/0x6d0
[ 1781.881122][T31645]  refill_objects+0x26b/0x400
[ 1781.885776][T31645]  __pcs_replace_empty_main+0x19f/0x600
[ 1781.891301][T31645]  __kmalloc_cache_noprof+0x493/0x6f0
[ 1781.896657][T31645]  bus_add_driver+0x92/0x5b0
[ 1781.901221][T31645]  driver_register+0x1e2/0x360
[ 1781.905961][T31645]  usb_register_driver+0x21c/0x3e0
[ 1781.911047][T31645]  do_one_initcall+0x11d/0x760
[ 1781.915789][T31645]  kernel_init_freeable+0x6e5/0x7a0
[ 1781.920964][T31645]  kernel_init+0x1f/0x1e0
[ 1781.925275][T31645]  ret_from_fork+0x754/0xd80
[ 1781.929839][T31645]  ret_from_fork_asm+0x1a/0x30
[ 1781.934582][T31645] page_owner free stack trace missing
[ 1781.939920][T31645] 
[ 1781.942219][T31645] Memory state around the buggy address:
[ 1781.947820][T31645]  ffff88802d871200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1781.955855][T31645]  ffff88802d871280: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 1781.963889][T31645] >ffff88802d871300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1781.971922][T31645]                       ^
[ 1781.976220][T31645]  ffff88802d871380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1781.984255][T31645]  ffff88802d871400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1781.992289][T31645] ==================================================================
[ 1782.001803][T31645] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1782.008996][T31645] CPU: 1 UID: 0 PID: 31645 Comm: syz.5.6936 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1782.019901][T31645] Tainted: [L]=SOFTLOCKUP
[ 1782.024200][T31645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1782.034229][T31645] Call Trace:
[ 1782.037488][T31645]  <TASK>
[ 1782.040390][T31645]  dump_stack_lvl+0x100/0x190
[ 1782.045050][T31645]  vpanic+0x552/0x970
[ 1782.049001][T31645]  ? __pfx_vpanic+0x10/0x10
[ 1782.053474][T31645]  ? try_module_get+0x4c/0xd0
[ 1782.058122][T31645]  panic+0xd1/0xe0
[ 1782.061811][T31645]  ? __pfx_panic+0x10/0x10
[ 1782.066198][T31645]  ? try_module_get+0x4c/0xd0
[ 1782.070844][T31645]  ? preempt_schedule_common+0x42/0xc0
[ 1782.076280][T31645]  check_panic_on_warn.cold+0x19/0x34
[ 1782.081623][T31645]  end_report.part.0+0x3a/0x90
[ 1782.086367][T31645]  kasan_report.cold+0xe/0x18
[ 1782.091016][T31645]  ? try_module_get+0x4c/0xd0
[ 1782.095668][T31645]  kasan_check_range+0x10f/0x1e0
[ 1782.100574][T31645]  try_module_get+0x4c/0xd0
[ 1782.105054][T31645]  dvb_device_open+0x124/0x3b0
[ 1782.109815][T31645]  ? __pfx_dvb_device_open+0x10/0x10
[ 1782.115089][T31645]  chrdev_open+0x234/0x6a0
[ 1782.119490][T31645]  ? __pfx_chrdev_open+0x10/0x10
[ 1782.124414][T31645]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1782.130733][T31645]  do_dentry_open+0x6d8/0x1660
[ 1782.135487][T31645]  ? __pfx_chrdev_open+0x10/0x10
[ 1782.140410][T31645]  vfs_open+0x82/0x3f0
[ 1782.144464][T31645]  path_openat+0x208c/0x31a0
[ 1782.149041][T31645]  ? __pfx_path_openat+0x10/0x10
[ 1782.153965][T31645]  do_file_open+0x20e/0x430
[ 1782.158453][T31645]  ? __pfx_do_file_open+0x10/0x10
[ 1782.163490][T31645]  ? alloc_fd+0x476/0x790
[ 1782.167849][T31645]  ? do_getname+0x191/0x390
[ 1782.172333][T31645]  do_sys_openat2+0x10d/0x1e0
[ 1782.176989][T31645]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1782.182180][T31645]  __x64_sys_openat+0x12d/0x210
[ 1782.187011][T31645]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1782.192354][T31645]  ? do_user_addr_fault+0x8d6/0x12f0
[ 1782.197615][T31645]  do_syscall_64+0x106/0xf80
[ 1782.202193][T31645]  ? clear_bhb_loop+0x40/0x90
[ 1782.206845][T31645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1782.212713][T31645] RIP: 0033:0x7f126235cece
[ 1782.217107][T31645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1782.236686][T31645] RSP: 002b:00007f126329ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1782.245068][T31645] RAX: ffffffffffffffda RBX: 00007f126329b6c0 RCX: 00007f126235cece
[ 1782.253011][T31645] RDX: 0000000000000002 RSI: 00007f126329ac00 RDI: ffffffffffffff9c
[ 1782.260951][T31645] RBP: 00007f126329ac00 R08: 0000000000000000 R09: 0000000000000000
[ 1782.268903][T31645] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1782.276868][T31645] R13: 00007f1262616038 R14: 00007f1262615fa0 R15: 00007fffeb170a88
[ 1782.284832][T31645]  </TASK>
[ 1782.288093][T31645] Kernel Offset: disabled
[ 1782.292390][T31645] Rebooting in 86400 seconds..